Media Downloader Vulnerabilities

The Media Downloader plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 0.4.7.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can succe...

CVSS:

6.1

Affected:

up to 0.4.7.5

Fixed in:

0.4.7.6

Disclosed:

Jan 27, 2025

CVE-2025-24684 on NVD →

The Media Downloader plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 0.4.7.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfu...

CVSS:

6.1

Affected:

up to 0.4.7.4

Fixed in:

0.4.7.5

Disclosed:

Dec 11, 2024

CVE-2024-54322 on NVD →

The Media Downloader plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the file name in all versions up to, and including, 0.1.992 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute...

CVSS:

6.1

Affected:

up to 0.1.992

Fixed in:

0.1.993

Disclosed:

Jan 23, 2014

CVE-2014-125090 on NVD →