Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-62114 EUVD-2025-206014GHSA-mvwr-m5xg-5w4h

WordPress Download Media Library plugin <= 0.2.1 - Sensitive Data Exposure vulnerability

Published Dec 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in marcelotorres Download Media Library download-media-library allows Retrieve Embedded Sensitive Data.This issue affects Download Media Library: from n/a through <= 0.2.1.

Affected products

VendorProductAffectedFixed
marcelotorres Download Media Library ≤ 0.2.1 —

References