Skip to content
OpenAdvisories

Vendor

devowl

4 known vulnerabilities.

Products

Real Media Library: Media Library Folder & File Manager 2 Real Cookie Banner: GDPR & ePrivacy Cookie Consent 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2025-12136

    Real Cookie Banner: GDPR & ePrivacy Cookie Consent <= 5.2.4 - Authenticated (Admin+) Server-Side Request Forgery via scan-without-login Endpoint

    The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.2.4. This is due to insufficient validation on the user-supplied URL in the '/scanner/scan-without…

    devowl Real Cookie Banner: GDPR & ePrivacy Cookie Consent Web / CMS
  • Medium 6.4
    CVE-2024-2328

    Real Media Library <= 4.22.11 - Authenticated (Author+) Stored Cross-Site Scripting

    The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image title and alt text in all versions up to, and including, 4.22.11 due to insufficient input sanitization and output esca…

    devowl Real Media Library: Media Library Folder & File Manager Web / CMS
  • Medium 6.4
    CVE-2024-2027

    Real Media Library: Media Library Folder & File Manager <= 4.22.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Real Media Library: Media Library Folder & File Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its style attributes in all versions up to, and including, 4.22.7 due to insufficient input sanitization and output escaping. Thi…

    devowl Real Media Library: Media Library Folder & File Manager Web / CMS