joomunited Vulnerabilities and Affected Products
Vulnerabilities associated with WP Media folder.
Products
Clear product- WP Meta SEO13 vulnerabilities
- WP Media folder3 vulnerabilities
- WP Table Manager3 vulnerabilities
- wp_meta_seo3 vulnerabilities
- WP Latest Posts2 vulnerabilities
- WP File Download Light1 vulnerability
- WP Media folder Addon1 vulnerability
- WP Meta SEO (WordPress plugin)1 vulnerability
- wp_media_folder1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-25907MEDIUM | WordPress WP Media folder plugin <= 5.7.2 - Plugin Settings Change vulnerabilityMissing Authorization vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2. CWE-862Mar 21, 2024 | CVSS5.4v3.1 | EPSS0.364% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-25908MEDIUM | WordPress WP Media folder plugin <= 5.7.2 - Subscriber+ Arbitrary Post/Page Modification vulnerabilityMissing Authorization vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2. CWE-862Mar 21, 2024 | CVSS4.3v3.1 | EPSS0.337% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-25909CRITICAL | WordPress WP Media folder Plugin <= 5.7.2 is vulnerable to Arbitrary File UploadUnrestricted Upload of File with Dangerous Type vulnerability in JoomUnited WP Media folder.This issue affects WP Media folder: from n/a through 5.7.2. CWE-434Feb 26, 2024 | CVSS9.9v3.1 | EPSS0.643% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |