Known Vulnerabilities for Media Server by Plex
Listed below are 10 of the newest known vulnerabilities associated with "Media Server" by "Plex".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110718 json | TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HT... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-108591 json | InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create perm... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-108264 json | Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.... | Not Provided | 2026-10-09 | 2026-10-13 |
| CVE-2026-107321 json | The W3 Total Cache WordPress plugin before 2.10.6 does not confine a media-import file copy to the document root, nor enforce... | Not Provided | 2026-10-10 | 2026-10-10 |
| CVE-2026-105764 json | Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin user... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-105645 json | Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request to the external media inliner could... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105123 json | W (vincent-peugnet/wcms) through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to w... | Not Provided | 2026-10-04 | 2026-10-05 |
| CVE-2026-104890 json | Kunstmaan CMS is an open source content management system based on the Symfony framework. Prior to 7.3.2, src/Kunstmaan/Media... | Not Provided | 2026-10-05 | 2026-10-07 |
| CVE-2026-104763 json | The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and includ... | Not Provided | 2026-10-10 | 2026-10-11 |
| CVE-2026-103367 json | The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions u... | Not Provided | 2026-10-14 | 2026-10-14 |