Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: DeluxeThemes Component: Media Manager Clear all filters
TI-2024-11883 CVE-2024-12822 · GHSA-v3v8-4cr7-2w3g

Media Manager for UserPro <= 3.12.0 - Missing Authorization to Unauthenticated Arbitrary Options Update

Priority MEDIUM 50

The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the add_capto_img() function in all version…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00594 Published 2025-01-30 No fix listed CWE-862
TI-2024-11882 CVE-2024-12821 · GHSA-j4mf-rp8x-w2c3

Media Manager for UserPro <= 3.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Priority MEDIUM 40

The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the upm_upload_media() function in all vers…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00367 Published 2025-01-30 No fix listed CWE-862