Critical · 9.9 CVE-2023-32095 EUVD-2023-36363GHSA-9hr4-7jqw-c29q

WordPress Rename Media Files Plugin <= 1.0.1 is vulnerable to Remote Code Execution (RCE)

Published Dec 29, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Milan Dinić Product: Rename Media Files

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Milan Dinić Rename Media Files.This issue affects Rename Media Files: from n/a through 1.0.1.

Affected products

Vendor	Product	Affected	Fixed
Milan Dinić	Rename Media Files	≤ 1.0.1	—

References

https://patchstack.com/database/vulnerability/rename-media-files/wordpress-rename-media-files-plugin-1-0-1-remote-code-execution-rce-vulnerability?_s_id=cve vdb-entry