Medium 5.4
2025-04-25≥ 2.8.6 and ≤ 2.8.8.2
Prevent Direct Access 2.8.6 - 2.8.8.2 - Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actions
Minimum safe version
2.8.8.1
Update to 2.8.8.1 or later to address 1 fixable vulnerability
Prevent Direct Access 2.8.6 - 2.8.8.2 - Incorrect Authorization to Authenticated (Contributor+) Multiple Media Actions
Prevent Direct Access – Protect WordPress Files <= 2.8.8 - Unauthenticated Sensitive Information Exposure