Sully vulnerabilities

Products

• Media Library File Size 1
• sully 1

Latest Sully CVEs

Newest publication first

1. CVE-2026-24569 WordPress Media Library File Size plugin <= 1.6.7 - Broken Access Control vulnerability

   Published 2026-01-23

   Medium·CVSS 4.3 EPSS 0.22%

   Missing Authorization vulnerability in Sully Media Library File Size media-library-file-size allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library File Size: from n/a through <= 1.6.7.

2. CVE-2024-5034 SULly < 4.3.1 - Plugin Reset via CSRF

   Published 2024-07-13

   High·CVSS 8.8 EPSS 0.36%

   The SULly WordPress plugin before 4.3.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.