ViewMedica 9

ViewMedica 9 has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.

Every one of the 3 issues recorded for ViewMedica 9 has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. ViewMedica 9 is installed on roughly 200 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.1.12.

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all ViewMedica 9 vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-13394

ViewMedica 9 <= 1.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records
Plugin Profile
Latestv1.4.21
0.0(0)
0/100
Last Updated
2025-02-24 (2y ago)
Active Installs
200+
Downloads
12,792
Requires WP
3.0.0+
Requires PHP
5.2.4+
Tested up to
WP 6.1.12
Created
2012-05-15 (15y ago)

This plugin is to help embed the ViewMedica&reg; Patient Education system on your WordPress site. It will help prevent WYSIWYG editors from stripping out script and HTML code that is required by your ViewMedica embed. You can also generate a full patient education section on your site in seconds! Instantly Embed ViewMedica The ViewMedica plugin for WordPress adds a button to the WYSIWG editor which allows you to instantly embed any video in your account. Simply click the button, select your video and press Embed. Create a page with links to your ViewMedica content Use the plugin’s Page Generator to instantly make a Web page that features all of your ViewMedica videos. You can choose to show your video links in list form, or with a thumbnail image and description. Change ViewMedica player settings globally The Global Options settings change the behavior of ViewMedica across your entire site. Set things like your player width, default language and other features. Change player settings for a single embed The Inline Options settings give you control of individual ViewMedica embeds on your site. For example, you may want to disable menu access on a page so your users only see one specific video. Checkout the Shortcode Generator to see the options available, or head to a post and use our inline tool. Download Download the latest release of the plugin at https://wordpress.org/plugins/viewmedica/

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C