Meow Apps Media File Renamer Unrestricted File Upload Vulnerability Allowing Remote Code Execution

Vulnerability

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in the Meow Apps Media File Renamer plugin for WordPress, affecting versions through 5.7.7. This vulnerability could be exploited to upload malicious files, potentially leading to remote code execution.

Impact

Exploitation of this vulnerability could allow for arbitrary file uploads, with the potential for those files to be executed, leading to remote code execution on the server.

Added: Jan 5, 2026, 2:23 PM
Updated: Jan 5, 2026, 2:23 PM

Vulnerability Rating

Custom Algorithm
spread
5.2
impact
10.0
exploitability
4.7
remediation
0.0
relevance
1.8
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.