CVE-2018-19041 — CVE-2018-19041

CVE-2018-19041

MEDIUM · CVSS 6.1

EPSS exploitation probability: 0%

Published 2019-01-31T19:29:00.623 · Last modified 2026-06-17T01:48:40.657

Summary

The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocator_getdir action to the wp-admin/admin-ajax.php URI.

media_file_manager_project — media_file_manager

Add your gear to cvedb and we'll alert you only when media_file_manager_project ships something exploited.

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.