CVE-2026-94278: File Media Renamer 0 through 1.3

Affected technology

File Media Renamer · 0 through 1.3
Vendor not specified by the source

Description’s affected range: through 1.3 does not verify that the requesting user is authorised to modify a given media attachment

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · High privileges required · No user interaction required

What an attacker can do

Any user with file-upload privileges to rename attachments belonging can other users, including administrators, and to corrupt unrelated stored site data that referenced the old file path. Source advisory’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality impact as none; integrity impact as high; availability impact as low.