Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: slui Clear all filters
TI-2025-31894 CVE-2025-49979 · GHSA-g2pq-7p3f-25jp

WordPress Media Hygiene plugin <= 4.0.1 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in slui Media Hygiene media-hygiene allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Hygiene: from n/a through <= 4.0.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00283 Published 2025-06-20 No fix listed CWE-862
TI-2025-29966 CVE-2025-47469 · GHSA-hfq6-gq9r-7wx7

WordPress Media Hygiene plugin <= 4.0.0 - Broken Access Control Vulnerability

Priority LOW 24

Missing Authorization vulnerability in slui Media Hygiene media-hygiene allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Hygiene: from n/a through <= 4.0.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00339 Published 2025-05-07 No fix listed CWE-862
TI-2024-05429 CVE-2024-5855 · GHSA-5pcx-3rjp-rm45

Media Hygiene <= 3.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion

Priority LOW 20

The Media Hygiene: Remove or Delete Unused Images and More! plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the bulk_action_delete and delete_single_image_call AJAX ac…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00377 Published 2024-07-09 No fix listed CWE-862