WP Media Category Management

WP Media Category Management has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.5 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for WP Media Category Management has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. WP Media Category Management is installed on roughly 6,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all WP Media Category Management vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2025-0865

WP Media Category Management 2.0 - 2.3.3 - Cross-Site Request Forgery to Settings Update

Read the full analysis

Vulnerability Records

2 records
WP Media Category Management banner
Latestv2.5.4

WP Media Category Management

Jan DeBAAT

Author

Jan DeBAAT

4.7(35)
94/100
Last Updated
2026-08-09 (1mo ago)
Active Installs
6,000+
Downloads
258,199
Requires WP
6.9+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2014-10-13 (12y ago)

This WordPress plugin will ease the management of media categories, including bulk actions. It supports categories for media using either the existing post categories or a dedicated media_category custom taxonomy. The plugin supports easy category toggling on the media list page view and also bulk toggling for multiple media at once. It now also supports post tags and media taxonomies defined by other plugins. The premium version will include media folder management for organizing files into hierarchical folders. Main Features Use post categories or dedicated MCM media categories. Control your media categories via admin the same way as post categories. Organize media into hierarchical folders for better file management. Optionally organize uploaded files into physical folder subdirectories. Bulk toggle any media taxonomy assignment from Media Library via admin. Filter media files in Media Library by your custom taxonomies and folders, both in List and Grid view. Use new or existing shortcode to filter the media on galleries in posts and pages. Use a default category while uploading (see FAQ section). Premium Features Use functionality to manage whether users are allowed or disallowed to manage media. Use WPMCM Gallery block to filter the media on galleries in posts and pages. Filter media per user on several places like List or Grid view and showing media with block or shortcode. Export MCM Categories and / or attachment information filtered by user. Use WP Importer functionality for exported information, even on sites without WP MCM Premium installed. Use WPMCM Gallery block layout when using wp-mcm shortcode to filter the media in posts and pages.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C