plugin

Realbig Media Vulnerabilities

2 known security issues reported for the Realbig Media WordPress plugin. Most recent disclosed Dec 31, 2025.

2 medium

Running Realbig Media on your site? Check whether your installed version is affected.

Scan your site free

Realbig <= 1.1.3 - Missing Authorization

medium

The Realbig plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.1.3. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:
5.3
Affected:
up to 1.1.3
Fix:
No patched version reported
Disclosed:
Dec 31, 2025

CVE-2025-62147 on NVD →

Realbig <= 1.0.6 - Cross-Site Request Forgery

medium

The Realbig plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.6. This is due to missing nonce validation on the tokenSync() function. This makes it possible for unauthenticated attackers to modify plugin settings and clear logs and cache via a forged request granted...

CVSS:
4.3
Affected:
up to 1.0.6
Fixed in:
1.0.7
Disclosed:
Sep 4, 2023

CVE-2023-41694 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database