Known Vulnerabilities for WP Users Media by Damir Calusic
Listed below are 10 of the newest known vulnerabilities associated with "WP Users Media" by "Damir Calusic".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65054 json | MediaCMS 8.2.0 contains an information disclosure vulnerability that allows authenticated users to expose private media metad... | Not Provided | 2026-07-21 | 2026-07-22 |
| CVE-2026-62415 json | Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2 - The Joomla extension Membership... | Not Provided | 2026-07-21 | 2026-07-23 |
| CVE-2026-61448 json | Parse Server is affected by a stored cross-site scripting (XSS) vulnerability in versions >= 9.0.0, < 9.10.0-alpha.2 and <= 8... | Not Provided | 2026-07-11 | 2026-07-13 |
| CVE-2026-60030 json | The Joomla extension Quix Page Builder Pro is vulnerable to an improper access control. Authenticated users could upload medi... | Not Provided | 2026-07-20 | 2026-07-21 |
| CVE-2026-60024 json | The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets. | Not Provided | 2026-07-17 | 2026-07-20 |
| CVE-2026-50232 json | Lyrion Music Server 9.2.0 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scri... | Not Provided | 2026-06-05 | 2026-06-08 |
| CVE-2026-49742 json | Backend users with file download permissions were able to download files from the fallback storage of the file abstraction la... | Not Provided | 2026-06-09 | 2026-06-11 |
| CVE-2026-48985 json | pam_usb provides hardware authentication for Linux using ordinary removable media. In versions 0.9.1 and below, pusb_is_login... | Not Provided | 2026-06-18 | 2026-06-18 |
| CVE-2026-48947 json | An improper access check allows privileged users to overwrite media files without editing permissions. | Not Provided | 2026-07-07 | 2026-07-08 |
| CVE-2026-48781 json | Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the Skool integration callback signed an attacker-... | Not Provided | 2026-06-17 | 2026-06-18 |