WordPress plugin
WP Media Category Management security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All WP Media Category Management vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | 2.3.3 - Cross-Site Request Forgery to Settings Update 2.0 – 2.3.3Update to 2.4.0 | CVE-2025-0865 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤2.2Update to 2.3.0 | CVE-2024-32950 |
- Medium6.52.3.3 - Cross-Site Request Forgery to Settings Update
2.0 – 2.3.3Update to 2.4.0
- Medium6.1Reflected Cross-Site Scripting
≤2.2Update to 2.3.0
WP Media Category Management: common questions
Does WP Media Category Management have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in WP Media Category Management: 2 medium. None are known to affect version null.
How do I check which version of WP Media Category Management I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Media Category Management vulnerability?
CVE-2025-0865, published Feb 18, 2025: WP Media Category Management 2.0 - 2.3.3 - Cross-Site Request Forgery to Settings Update. Severity: Medium (CVSS 6.5).
Is any WP Media Category Management vulnerability listed in CISA KEV?
No. None of the known WP Media Category Management vulnerabilities is currently listed in the CISA KEV catalog.