wp_media has 1 CVE on record. 1 was published in the last 90 days. The median CVSS is 7.2 (high).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 7.2
Publish → KEV: —
Last 90 days: 1 prev 0

Weakness classes

CWE-79 1

Products

LazyLoad Plugin – Lazy Load Images, Videos, and Iframes 1

Follow wp_media:RSS feed Save a search →Embed badge ↗

1

Total CVEs

0

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-100196High· 7.2The LazyLoad Plugin – Lazy Load Images, Videos, and Iframes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment_content (rendered inline into the page HTML)' parameter in all versions up to, and including, …40

wp_media vulnerabilities

CVEs affecting wp_media, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-100196High· 7.2

The LazyLoad Plugin – Lazy Load Images, Videos, and Iframes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment_content (rendered inline into the page HTML)' parameter in all versions up to, and including, …

The LazyLoad Plugin – Lazy Load Images, Videos, and Iframes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment_content (rendered inline into the page HTML)' parameter in all versions up to, and including, …

▾ Twilightwp_media · LazyLoad Plugin – Lazy Load Images, Videos, and IframesEPSS 0.29%via NVD

wp_media vulnerabilities (CVEs) · VulnSea