PT-2026-4411 · WordPress · Sully Media Library File Size

Nabil Irawan · Published 2026-01-23 · Updated 2026-01-24 · CVE-2026-24569

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sully Media Library File Size versions through 1.6.7

Description An authorization issue exists in Sully Media Library File Size. The issue involves incorrectly configured access control security levels, potentially allowing unauthorized access. The affected component is the media library file size functionality.

Recommendations Update to a version later than 1.6.7.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-24569

Affected Products

Sully Media Library File Size

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-24569 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/media-library-file-size/vulnerability/wordpress-media-library-file-size-plugin-1-6-7-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2015086282167218618 · Twitter Post