Media Manager

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-12822 CRITICAL This Week

The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the add_capto_img(). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass WordPress Privilege Escalation Media Manager

NVD

CVSS 3.1

9.8

EPSS

0.2%

CVE-2024-12821 HIGH This Month

The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the upm_upload_media(). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass WordPress Privilege Escalation Media Manager

NVD

CVSS 3.1

8.8

EPSS

0.1%

CVE-2024-12822

EPSS 0% CVSS 9.8

CRITICAL This Week

Authentication Bypass WordPress Privilege Escalation +1

NVD

CVE-2024-12821

EPSS 0% CVSS 8.8

HIGH This Month

The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the upm_upload_media(). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass WordPress Privilege Escalation +1

NVD