Does Medias ToolBox have any unpatched vulnerabilities?

No. All known vulnerabilities in Medias ToolBox have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Medias ToolBox compatible with WordPress 6.8.5?

According to WordPress.org data, Medias ToolBox 1.7.7 has been tested up to WordPress 6.8.5. Check the plugin's changelog for the latest compatibility information.

How often is Medias ToolBox updated?

Medias ToolBox was last updated on Apr 26, 2025. Frequent updates are generally a positive security signal.

What is Medias ToolBox's security score?

Medias ToolBox has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Medias ToolBox Security & Risk Analysis

wordpress.org/plugins/medias-toolbox

Medias Toolbox allow you to sanitize and rename automatically media files during upload.

10 active installs v1.7.7 PHP + WP 4.9+ Updated Apr 26, 2025

cleanfilefilesmediarename

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Medias ToolBox Safe to Use in 2026?

Generally Safe

Score 100/100

Medias ToolBox has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11mo ago

Risk Assessment

The "medias-toolbox" v1.7.7 plugin exhibits a mixed security posture. On the positive side, it boasts a remarkably small attack surface with zero identified entry points like AJAX handlers, REST API routes, shortcodes, or cron events that are unprotected. The plugin also demonstrates a commitment to secure coding practices with a high percentage of SQL queries utilizing prepared statements and a reasonable proportion of output being properly escaped. Furthermore, the absence of any recorded vulnerabilities or CVEs in its history is a strong indicator of stable and secure development.

Key Concerns

Flows with unsanitized paths found
High severity taint flow identified
Percentage of outputs properly escaped is low
Capability checks are missing

Vulnerabilities

None known

Medias ToolBox Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

Medias ToolBox Code Analysis

Dangerous Functions

Raw SQL Queries

7 prepared

Unescaped Output

25 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

88% prepared8 total queries

Output Escaping

66% escaped38 total outputs

Data Flows

2 unsanitized

Data Flow Analysis

3 flows2 with unsanitized paths

<class-medias-toolbox-admin> (admin\class-medias-toolbox-admin.php:0)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Medias ToolBox Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 7

actionplugins_loadedincludes\class-medias-toolbox-core.php:104

actionadmin_enqueue_scriptsincludes\class-medias-toolbox-core.php:118

actionadmin_enqueue_scriptsincludes\class-medias-toolbox-core.php:119

actionadmin_menuincludes\class-medias-toolbox-core.php:122

actioninitincludes\class-medias-toolbox-core.php:123

actioninitincludes\class-medias-toolbox-core.php:124

filtersanitize_file_nameincludes\class-medias-toolbox-core.php:125

Maintenance & Trust

Medias ToolBox Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5

Last updatedApr 26, 2025

PHP min version

Downloads7K

Community Trust

Rating100/100

Number of ratings1

Active installs10

Alternatives

Medias ToolBox Alternatives

Media Cleaner: Clean your WordPress!

media-cleaner

Clean your WordPress! Eliminate unused and broken media files. For a faster, and better website.

90K 1 CVE

Media Sweep – WordPress Media Cleaner

media-sweep

100

Clean up your WordPress Media Library by finding and removing unused files. Safely scan, preview, and sweep away orphaned media to keep your site fast …

500 No CVEs

Ultimate media cleaner

ultimate-media-cleaner

Find used medias from you from the database and/or your upload folder and give the way to delete them the ones "unused"

300 No CVEs

File Media Renamer for SEO

file-media-renamer-for-seo

100

Rename media files with SEO-friendly names, auto-update references, alt/title sync, and 301 redirects — fast and safe.

80 No CVEs

Cleanup Orphan Images

cleanup-orphan-images

100

Finds and deletes orphan media files from the uploads directory that are not registered in WordPress.

20 No CVEs

Developer Profile

Medias ToolBox Developer Profile

neoslab

7 plugins · 920 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Medias ToolBox

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/medias-toolbox/admin/assets/styles/fontawesome.min.css/wp-content/plugins/medias-toolbox/admin/assets/styles/medias-toolbox-admin.min.css/wp-content/plugins/medias-toolbox/admin/assets/javascripts/medias-toolbox-admin.min.js

Script Paths

admin/assets/javascripts/medias-toolbox-admin.min.js

Version Parameters

medias-toolbox/admin/assets/styles/fontawesome.min.css?ver=medias-toolbox/admin/assets/styles/medias-toolbox-admin.min.css?ver=medias-toolbox/admin/assets/javascripts/medias-toolbox-admin.min.js?ver=

HTML / DOM Fingerprints

CSS Classes

wpbnd-header-pluginheader-iconheader-texttab-label

FAQ