Publisher Media Kit
Publisher Media Kit has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Inefficient Regular Expression Complexity, behind 1 of the records (100%).
The one issue recorded for Publisher Media Kit has a vendor fix available, so running the current release closes it.
Publisher Media Kit is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2022-25858Terser < 4.8.1 and 5.0.0-5.14.1 - Regular Expression Denial of Service
Read the full analysisVulnerability Records
Publisher Media Kit
Author
10up
Publisher Media Kit provides a quick and easy option for small to medium sized publishers to digitize their media kit. If you are a publisher hoping for a page like the NY Times’ Advertising Standard Units, but do not have a designer or developer on staff? Then this plugin is for you. If you are still using a print or PDF version of your media kit to sell space on your website, but want show advertisers looking to buy digital real estate that you are a digital-forward partner? Then this plugin is for you. The plugin adds a new “Media Kit” page, block patterns, and placeholder content that can then be customized to fit your need (e.g., text, links, colors, images, adding page link to site footer). Theme Compatibility We have tested the plugin with the following WordPress themes and have validated that the resulting Media Kit page renders as expected on the front-end and within the block editor. Please open an issue if you find an issue with any of these themes or have an alternate, public theme with a conflict that we can help resolve. Twenty Twenty-One Newspack base theme Newspack: Joseph Newspack: Katharine Newspack: Nelson Newspack: Sacha Newspack: Scott
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C