CVE-2021-24311

HIGH 8.8CVE-2021-24311 · Published 01/06/2021 · updated 17/06/2026

In short

CVE-2021-24311 is a HIGH (CVSS 8.8) vulnerability affecting external media (external media project).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.3% of all vulnerabilities.
Fix: update to 1.0.34 or later.

Package	Affected versions	Patched versions
external media external_media_project	`< 1.0.34`	`1.0.34`

Description

The wp_ajax_upload-remote-file AJAX action of the External Media WordPress plugin before 1.0.34 was vulnerable to arbitrary file uploads via any authenticated users.

References

wpscan.com/vulnerability/4fb90999-6f91-4200-a0cc-bfe9b34a5de9 · Exploit
wordfence.com/blog/2021/05/critical-vulnerability-patched-in-external-media-plugin · Exploit

More vulnerabilities in external media

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free