WP Original Media Path

Explore WP Original Media Path vulnerabilities across all versions. Currently tracking 1 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

4.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP Original Media Path vulnerabilities before they are exploited.

Vulnerability Records

1 records


2023-04-19 00:00	WP Original Media Path <= 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings WP Original Media Path <= 2.4.0	`CVE-2023-23674`	4.4 Medium	Rio Darmawan	Yes

Showing 1–1 of 1 reports

Latestv2.4.2

WP Original Media Path

Author

RVOLA

4.9(38)

98/100

Last Updated

2026-03-16 (5mo ago)

Active Installs

6,000+

Downloads

139,693

Requires WP

3.5+

Requires PHP

7.0+

Tested up to

WP 6.9.5

Created

2012-12-29 (14y ago)

WordPress has changed the media page, removing the two fields to define the location and the sub-field of media. There exists a constant wp-config.php, but it does not include sub-domains. Once activated, the plugin will add two values in the database, you modify later. The plugin is not retroactive for images already uploaded. Follow the installation instructions to migrate your old images. This extension is not compatible with WordPress multisite. Thank you to try to find the solution by yourself or on the forum. The author of the plugin is no after-sales service. Most of the issues have already been addressed. GitHub | Donate

View on WordPress.org