WordPress plugin
WP Original Media Path security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All WP Original Media Path vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings ≤2.4.0Update to 2.4.1 | CVE-2023-23674 |
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
≤2.4.0Update to 2.4.1
WP Original Media Path: common questions
Does WP Original Media Path have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in WP Original Media Path: 1 medium. None are known to affect version null.
How do I check which version of WP Original Media Path I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Original Media Path vulnerability?
CVE-2023-23674, published Apr 19, 2023: WP Original Media Path <= 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings. Severity: Medium (CVSS 4.4).
Is any WP Original Media Path vulnerability listed in CISA KEV?
No. None of the known WP Original Media Path vulnerabilities is currently listed in the CISA KEV catalog.