Media Library Downloader

Media Library Downloader has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Media Library Downloader has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Media Library Downloader is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Media Library Downloader vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-62734

Media Library Downloader <= 1.4.0 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

2 records
Media Library Downloader banner
Latestv1.4.3

Media Library Downloader

M.Code

Author

M.Code

4.8(8)
96/100
Last Updated
2026-07-30 (2mo ago)
Active Installs
4,000+
Downloads
28,779
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2021-10-02 (5y ago)

Transform your WordPress media library into a powerful download center! While WordPress doesn’t provide native file download capabilities, Media Library Downloader bridges this gap with enterprise-grade functionality and professional user experience. Whether you need to download a single image or backup hundreds of media files, this plugin makes it effortless with intuitive one-click downloads, smart bulk operations, and advanced management features. Core Features: Single & Bulk Downloads – Download individual files instantly or create ZIP archives from multiple selections Universal Compatibility – Works seamlessly with both List and Grid view layouts Smart Download Management – Automatic file organization with customizable naming patterns Progress Indicators – Real-time feedback during download preparation AJAX Technology – Lightning-fast downloads with no page refreshes Advanced Features: Admin Settings Dashboard – Complete control panel for configuration and monitoring Download Activity Logging – Track usage patterns and generate statistics Automatic Cleanup – Scheduled maintenance to keep your server optimized Security & Permissions – Enterprise-grade access control and CSRF protection Accessibility Compliant – Full keyboard navigation and screen reader support Developer Friendly – Extensive hooks and filters for customization Perfect For: Content Creators – Quickly download media for offline editing Site Administrators – Bulk backup and migration of media files Agencies – Client asset delivery and portfolio management Developers – Media file management during development Anyone – Who needs efficient file access from WordPress media library Experience the difference of professional-grade media management with intuitive design and powerful functionality! How to Use Once the plugin is installed and activated, you can start downloading files from your media library immediately. Downloading Single Files Go to your WordPress admin area Navigate to Media > Library You can use either List view or Grid view Locate the file you want to download Click the Download button that appears next to each media file The file will be downloaded to your computer Downloading Multiple Files Go to Media > Library Switch to List view using the icons above the media table (list icon on the left) Select the files you want using the checkboxes in the first column Click the blue Download selected files button next to Bulk actions, or choose Bulk actions > Download selected files and click Apply For a single file, hover a row title and click Download in the row actions Selected files will be packaged and downloaded as a ZIP file View Options The plugin works seamlessly with both WordPress media library view options: List View: Shows files in a table format with download buttons in each row Grid View: Displays files as thumbnails with download options accessible via hover or click Plugin Settings Go to Settings > Media Downloader in your WordPress admin Configure maximum download size limits (default: 100MB) Set automatic cleanup intervals for temporary files (default: 24 hours) Enable download logging to track activity (optional) Customize ZIP filename patterns with placeholders like {timestamp}, {date}, {user} Use manual cleanup to remove temporary files immediately Important Notes Downloads are processed using AJAX, so there’s no page reload Large files or multiple file downloads may take a few moments to process Ensure your browser allows downloads from your WordPress site The plugin respects WordPress user permissions – only users with appropriate media access can download files Temporary ZIP files are automatically cleaned up based on your settings Download activity can be logged and viewed in the admin dashboard

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C