Known Vulnerabilities for Media Author by John Luetke
Listed below are 9 of the newest known vulnerabilities associated with "Media Author" by "John Luetke".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65054 json | MediaCMS 8.2.0 contains an information disclosure vulnerability that allows authenticated users to expose private media metad... | Not Provided | 2026-07-21 | 2026-07-22 |
| CVE-2026-48946 json | The K2 frontend article-attachment upload path accepts files whose extension is `.php`, and Apache's standard mod_php matches... | Not Provided | 2026-06-25 | 2026-06-28 |
| CVE-2026-48944 json | The K2 frontend article-save handler accepts an `attachment[N][existing]` POST field that is concatenated with `JPATH_SITE/` ... | Not Provided | 2026-06-25 | 2026-06-28 |
| CVE-2026-12165 json | The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Privileg... | Not Provided | 2026-06-17 | 2026-06-17 |
| CVE-2026-11784 json | The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnera... | Not Provided | 2026-06-18 | 2026-06-18 |
| CVE-2026-7252 json | The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is... | Not Provided | 2026-05-07 | 2026-05-07 |
| CVE-2026-6670 json | The Media Sync plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.9 via the 'sub_... | Not Provided | 2026-05-14 | 2026-05-14 |
| CVE-2026-5714 json | The Enable Media Replace plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘location_dir’ paramet... | Not Provided | 2026-06-09 | 2026-06-09 |
| CVE-2022-46850 json | Auth. (author+) Broken Access Control vulnerability leading to Arbitrary File Deletion in Nabil Lemsieh Easy Media Replace pl... | Not Provided | 2023-06-19 | 2026-04-28 |