Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

Media Cleaner: Clean your WordPress! Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 2 vulnerability records associated with Media Cleaner: Clean your WordPress!, published between 2024 and 2026.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

2Total records
0Critical
0High
2Medium
0Low
0Informational
2Patched records
0Currently marked unpatched
2024-04-29First disclosure
2026-07-27Latest disclosure
2 of 2CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
202411 records
202611 records

Severity Breakdown

SeverityRecordsShare
Medium2100%

Vulnerability-Type Breakdown

Information Disclosure

1 record50%

First: 2024. Latest: 2024.

Other

1 record50%

First: 2026. Latest: 2026.

Patch Status

Patched
2
Currently marked unpatched
0
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 7.0.6
  • 6.7.3

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-7.0.3Media Cleaner: Clean your WordPress! <= 7.0.3 - Authenticated (Administrator+) Server-Side Request ForgeryJuly 27, 20267.0.6Medium
*-6.7.2Media Cleaner: Clean your WordPress! <= 6.7.2 - Unauthenticated Information ExposureApril 29, 20246.7.3Medium

Selected source records

Latest Records

MediumCVE-2026-4912

Media Cleaner: Clean your WordPress! <= 7.0.3 - Authenticated (Administrator+) Server-Side Request Forgery

Published: July 27, 2026

Affected versions
*-7.0.3
Patched versions
7.0.6
Original Wordfence record
MediumCVE-2024-33922

Media Cleaner: Clean your WordPress! <= 6.7.2 - Unauthenticated Information Exposure

Published: April 29, 2024

Affected versions
*-6.7.2
Patched versions
6.7.3
Original Wordfence record

Highest-Severity Records

MediumCVE-2024-33922

Media Cleaner: Clean your WordPress! <= 6.7.2 - Unauthenticated Information Exposure

Published: April 29, 2024

Affected versions
*-6.7.2
Patched versions
6.7.3
Original Wordfence record
MediumCVE-2026-4912

Media Cleaner: Clean your WordPress! <= 7.0.3 - Authenticated (Administrator+) Server-Side Request Forgery

Published: July 27, 2026

Affected versions
*-7.0.3
Patched versions
7.0.6
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory