Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: External Media Project Clear all filters
TI-2022-03512 CVE-2022-3832 · GHSA-2mc8-x568-88x3

External Media < 1.0.36 - Admin+ Stored XSS

Priority MEDIUM 55

The External Media WordPress plugin before 1.0.36 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfil…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00493 Published 2022-12-19 Fixed in 1.0.36
TI-2021-06603 CVE-2021-24311 · GHSA-hmcx-73wq-2qf4

External Media < 1.0.34 - Authenticated Arbitrary File Upload

Priority MEDIUM 42

The wp_ajax_upload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated users.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01775 Published 2021-06-01 Fixed in 1.0.34 CWE-434