CVE-2024-10482

5.4 mediumEPSS 0.4%

Medium (5.4) in wptinysolutions media library tools. EPSS 0.4% chance of exploitation in the next 30 days.

The Media File Rename, Find Unused File, Add Alt text, Caption, Desc For Image SEO WordPress plugin before 1.5.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-11-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wptinysolutions:media_library_tools

References

https://wpscan.com/vulnerability/46cbd4bb-b6f3-49e8-8d79-8c378c617e7c/

Check your stack JSON