Rocket Media Library Mime Type

Rocket Media Library Mime Type has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of October 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Rocket Media Library Mime Type has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by SOPROBRO. Rocket Media Library Mime Type is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Rocket Media Library Mime Type vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-22768

Rocket Media Library Mime Type <= 2.1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv3.0.2

Rocket Media Library Mime Type

Rocketm2n

Author

Rocketm2n

0.0(0)
0/100
Last Updated
2026-10-26 (2d ago)
Active Installs
80+
Downloads
2,730
Requires WP
5.0+
Requires PHP
7.0+
Tested up to
WP 7.1.3
Created
2015-04-18 (12y ago)

A small plugin that collects useful upload-related features. It has four main features. Choose the file types that may be uploaded to the media library. For example, use it when hwp (Hangul Word Processor) files are rejected by WordPress. Filter the media library list by file extension. Example: show only hwp files. Automatically convert Korean file names to Latin letters (romanization) on upload. Example: 사과.jpg becomes sagwa.jpg, and 한글 파일.jpg becomes hangeul-pail.jpg. A separate option appends the upload date and time to the file name (for example photo__2026-01-31-09-30-00.jpg). Restrict risky file types (svg, exe, macro-enabled Office files) to administrators. 한국어 안내 워드프레스 업로드와 관련된 기능을 모은 플러그인입니다. 설정은 설정 > 업로드 파일 타입에서 합니다. 업로드를 허용할 파일 타입 선택 (hwp, svg, csv 등) 한글 파일명을 로마자로 자동 변환 (예: 사과.jpg > sagwa.jpg). 외부 서비스나 API 키가 필요 없습니다. 파일명 뒤에 업로드 일시 붙이기, 맥(macOS)에서 올린 한글 파일명 고치기 위험한 형식(svg, exe, 매크로 파일)은 관리자만 업로드 Korean file name conversion Korean letters are converted to Latin letters using the letter table of the Revised Romanization of Korean. This is not a translation: 사과 becomes sagwa, not Apple. The conversion is calculated on your server, no external service is used, and no API key or fee is needed. Pronunciation-dependent rules (such as liaison) are not applied; each letter is converted as it is. Example: 신라 becomes sinra. Files uploaded from macOS often have Korean letters split into consonants and vowels (Unicode NFD), which look broken on servers and Windows. With the option “Fix Korean file names uploaded from macOS” turned on, the letters are combined back into normal Korean when the file is uploaded. Selectable file extensions hwp, bmp, doc, ico, xla/xls/xlt/xlw, xlsx, pot/pps/ppt, pptx, ppam, pptm, psd, mp4, webm, ogv, csv, ai/eps/ps, txt, svg, json, exe, and the file types WordPress allows by default (jpg, png, gif, mp3, mov, avi, wmv, mid, pdf, zip, gz). Security notice: Allow svg, exe and files that may contain macros (ppam, pptm) with care. After uploading the file you need, turn the option off again. With the option “Only administrators can upload risky file types” (on by default), users who are not administrators cannot upload these types even if they are enabled. External services This plugin does not connect to any external service and does not send any data outside your site. The settings screen uses only the CSS and JavaScript files included in the plugin.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C