PLUGIN SECURITY
Is Enhanced Media Library safe?
This plugin would be handy for those who need to manage a lot of media files.
What this plugin does
- Slug:
enhanced-media-library - Author: webbistro
- 60000+ active installs
- 86/100 rating (298 reviews on wordpress.org)
- 2649346 all-time downloads
- On WordPress.org since 2013-11-03
media categoriesmedia foldersmedia librarymedia tagsmime-types
Maintenance status
- Latest known version: 2.9.4
- Last updated: 2024-07-15 2:07pm GMT
- Tested up to WordPress: 6.5.10
- Requires PHP: 5.6+
- Max supported PHP (analyzed): 8.4
⚠ Enhanced Media Library hasn't been updated in over 777 days. An unmaintained plugin doesn't receive new security fixes, which is itself a security risk even without a known CVE.
Known vulnerabilities
1 known CVE on file for Enhanced Media Library. Reported between 2024 and 2024.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-2840 | Enhanced Media Library [enhanced-media-library] < 2.8.10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.8.10 | 2.8.10 | 2024-04-15 | ✓ fixed in latest |
How to fix it
Keep Enhanced Media Library updated — 2.9.4 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- FileBird – WordPress Media Library Folders & File Manager — 200000+ active installs — 94/100 (1120) — max PHP 8.4
- Media Library Organizer – Folders, File Manager & Media Categories — 20000+ active installs — 94/100 (148) — max PHP 8.4
- Mediamatic – Media Library Folders — 1000+ active installs — 78/100 (16)
- Categorify – WordPress Media Library Category & File Manager — 1000+ active installs — 40/100 (2)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.