PLUGIN SECURITY

Is Enhanced Media Library safe?

This plugin would be handy for those who need to manage a lot of media files.

What this plugin does

  • Slug: enhanced-media-library
  • Author: webbistro
  • 60000+ active installs
  • 86/100 rating (298 reviews on wordpress.org)
  • 2649346 all-time downloads
  • On WordPress.org since 2013-11-03

media categoriesmedia foldersmedia librarymedia tagsmime-types

Maintenance status

  • Latest known version: 2.9.4
  • Last updated: 2024-07-15 2:07pm GMT
  • Tested up to WordPress: 6.5.10
  • Requires PHP: 5.6+
  • Max supported PHP (analyzed): 8.4

⚠ Enhanced Media Library hasn't been updated in over 777 days. An unmaintained plugin doesn't receive new security fixes, which is itself a security risk even without a known CVE.

Known vulnerabilities

1 known CVE on file for Enhanced Media Library. Reported between 2024 and 2024.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-2840 Enhanced Media Library [enhanced-media-library] < 2.8.10 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 5.4 < 2.8.10 2.8.10 2024-04-15 ✓ fixed in latest

How to fix it

Keep Enhanced Media Library updated — 2.9.4 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.