Read the docs

External Media Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

External Media Project records in CISA KEV

No External Media Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
External Media 2 records MEDIUM

Records

2 records in External Media · all components

TI-2022-03512 CVE-2022-3832 · GHSA-2mc8-x568-88x3

External Media < 1.0.36 - Admin+ Stored XSS

Priority MEDIUM 55

The External Media WordPress plugin before 1.0.36 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfil…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00493 Published 2022-12-19 Fixed in 1.0.36
TI-2021-06603 CVE-2021-24311 · GHSA-hmcx-73wq-2qf4

External Media < 1.0.34 - Authenticated Arbitrary File Upload

Priority MEDIUM 42

The wp_ajax_upload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated users.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01775 Published 2021-06-01 Fixed in 1.0.34 CWE-434
Open these records in search →