Extension WordPress

Vulnérabilités Media File Renamer: Rename for better SEO (AI-Powered)

Cette page rassemble les failles publiées pour Media File Renamer: Rename for better SEO (AI-Powered), leurs plages de versions affectées et les correctifs signalés dans la base locale.

5Vulnérabilités
0Critiques
5Avec correctif
8,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Media File Renamer: Rename for better SEO (AI-Powered)

5 fiches

CVE-2023-50897 Moyenne · 6,6
Media File Renamer: Rename for better SEO (AI-Powered)

Media File Renamer <= 5.7.7 – Authenticated(Administrator+) Remote Code Execution

The Media File Renamer: Rename Files (Manual, Auto & AI) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.7.7. This makes it possible for authenticated attackers, with administrator access and…

Versions affectées

*-5.7.7

Correctif

5.7.8

Publication

26/12/2023

CVE-2023-44991 Moyenne · 5,3
Media File Renamer: Rename for better SEO (AI-Powered)

Media File Renamer <= 5.6.9 – Sensitive Information Exposure via Log File

The Media File Renamer: Rename Files (Manual, Auto & AI) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.6.9 via the logging functionality. This makes it possible for unauthenticated attackers…

Versions affectées

*-5.6.9

Correctif

5.7.0

Publication

28/11/2023

CVE-2014-2040 Moyenne · 6,4
Media File Renamer: Rename for better SEO (AI-Powered)

Media File Renamer < 1.9.4 – Stored Cross-Site Scripting

Multiple cross-site scripting (XSS) vulnerabilities in the (1) callback_multicheck, (2) callback_radio, and (3) callback_wysiwygin functions in mfrh_class.settings-api.php in the Media File Renamer plugin 1.7.0 for WordPress allow remote authenticated users with permissions to add media or edit media…

Versions affectées

[*, 1.9.4)

Correctif

1.9.4

Publication

31/01/2014

Vulnérabilité Élevée · 8,8
Media File Renamer: Rename for better SEO (AI-Powered)

Media File Renamer – Auto & Manual Rename <= 5.2.5 – Missing Authorization Checks

The Media File Renamer – Auto & Manual Rename plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'get_license' and 'set_license' API endpoints in versions up to, and including, 5.2.5. This…

Versions affectées

*-5.2.5

Correctif

5.2.6

Publication

03/09/2012

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités