Description
WordPress Plugin Phoenix Media Rename is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently rename any uploaded media files. WordPress Plugin Phoenix Media Rename version 3.4.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.4.4 or latest
References
https://sploitus.com/exploit?id=WPEX-ID:5F63D677-20F3-4FE0-BB90-048B6898E6CD
https://plugins.svn.wordpress.org/phoenix-media-rename/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin WP Fastest Cache Multiple Vulnerabilities (0.8.5.7)
Drupal Data Processing Errors Vulnerability (CVE-2016-3171)
Java Denial of Service (DoS) Vulnerability (CVE-2018-2952)
Angular : Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2026-88059)
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-13074)