Media Library File Download
Media Library File Download has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; 1 is fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.
1 of the records (33%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2023.
2 independent researchers contributed these findings, one record each. Media Library File Download is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.11.
CVE-2023-33999Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Read the full analysisVulnerability Records
Media Library File Download
Author
wpmediadownload
Tired of right clicking to save images from Media Library? This plugin allows you to download and replace files directly from your Media Library. It adds a button to download the original, saving you time and clicks! As of 2023, you can now export the entire Media Library in a single click. Features NEW FEATURE!!! One click download export of entire Media Library to zip file. Download image or file to your computer while in Media Library Modal or Attachment View (doesn’t open file in browser) Download image or file to your computer while in Media Library List View (doesn’t open file in browser) Replace Same File Type Tiny footprint PRO Features Compress and select multiple files for bulk download (downloads a zip file of selected images) Download single files in one click while in Thumbnail View hover Download single files in one click while in List View
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C