Upload Media By URL

Upload Media By URL has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Upload Media By URL has a vendor fix available, so running the current release closes it.

All of these findings were reported by Dmitrii Ignatyev.

Strategic Overview

Avg CVSSMedium

6.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Upload Media By URL vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2023-3720

Upload Media By URL <= 1.0.7 - Cross-Site Request Forgery via 'umbu_download'

Read the full analysis

Vulnerability Records

1 records


2023-08-02 00:00	Upload Media By URL <= 1.0.7 - Cross-Site Request Forgery via 'umbu_download' Upload Media By URL <= 1.0.7	`CVE-2023-3720`	6.5 Medium	Dmitrii Ignatyev	Yes

Showing 1–1 of 1 reports