Critical · 9.1 CVE-2023-50897 EUVD-2023-55630GHSA-8m2h-8f3p-p428

WordPress Media File Renamer plugin <= 5.7.7 - Arbitrary File Rename lead to RCE vulnerability

Published Jan 5, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Meow Apps Product: Media File Renamer

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Meow Apps Media File Renamer allows Using Malicious Files.This issue affects Media File Renamer: from n/a through 5.7.7.

Affected products

Vendor	Product	Affected	Fixed
Meow Apps	Media File Renamer	≤ 5.7.7	—

References

https://vdp.patchstack.com/database/wordpress/plugin/media-file-renamer/vulnerability/wordpress-media-file-renamer-plugin-5-7-7-arbitrary-file-rename-lead-to-rce-vulnerability?_s_id=cve vdb-entry