CVE-2021-36850: Meowapps Media File Renamer - Auto & Manual Rename

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in WordPress Media File Renamer – Auto & Manual Rename plugin (versions <= 5.1.9). Affected parameters "post_title", "filename", "lock". This allows changing the uploaded media title, media file name, and media locking state.

Affected products

• Meowapps Media File Renamer - Auto & Manual Rename: up to and including 5.1.9

Published 2021-10-04. Last modified 2026-06-17.