BuddyDev MediaPress

• CVE-2026-22519 Medium 6.5 WordPress MediaPress plugin <= 1.6.2 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-14552 Medium 6.4 MediaPress <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin's Shortcode 0.2%
• CVE-2025-58608 High 7.5 WordPress MediaPress Plugin <= 1.5.9.1 - Local File Inclusion Vulnerability 0.6%