WordPress security by component

Enhanced Media Library

Plugin description

Enhanced Media Library is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 02, 2024; the highest CVE/CNA score is 5.4.

Plugin slug: enhanced-media-library

Latest vulnerability

CVE-2024-2840: Enhanced Media Library: Cross-site scripting

Enhanced Media Library is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedMay 02, 2024

Safe version guidanceSee mitigation notes

		Safe version
May 02, 2024	CVE-2024-2840 Enhanced Media Library: Cross-site scripting Enhanced Media Library is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE5.4 NVDPending