Bulk Media Register vulnerabilities
We track 1 vulnerability in Bulk Media Register products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Bulk Media Register vulnerabilities
- 7.2 High severity
Bulk Media Register: Improper Limitation of a Pathname to a Restricted Directory
The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a file on the server, allowing users with the Author role to move or rename arbitrary files, including outside the WordPress root, which can defe