Read the docs

Media File Manager Project

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Media File Manager Project records in CISA KEV

No Media File Manager Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records

Priority LOW 36

The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming (specifying a "from" and "to" filename) via a ../ directory traversal in the dir parameter of an mrelocator_rename action to the wp-admin/a…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.10005 Published 2019-01-31 No fix listed CWE-22
Open these records in search →