Medium severity5.4NVD Advisory· Published Oct 4, 2021· Updated Jun 17, 2026
CVE-2021-36850
CVE-2021-36850
Description
Cross-Site Request Forgery (CSRF) vulnerability in WordPress Media File Renamer – Auto & Manual Rename plugin (versions <= 5.1.9). Affected parameters "post_title", "filename", "lock". This allows changing the uploaded media title, media file name, and media locking state.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:meowapps:media_file_renamer_-_auto_\&_manual_rename:*:*:*:*:*:wordpress:*:*Range: <=5.1.9
- Meow Apps/Media File Renamer – Auto & Manual Rename (WordPress plugin)v5Range: <= 5.1.9
- Range: <=5.1.9
Patches
Vulnerability mechanics
References
2- patchstack.com/database/vulnerability/media-file-renamer/wordpress-media-file-renamer-plugin-5-1-9-multiple-cross-site-request-forgery-csrf-vulnerabilitiesnvdThird Party Advisory
- wordpress.org/plugins/media-file-renamer/nvdRelease NotesThird Party Advisory
News mentions
0No linked articles in our index yet.