Security for everyone

CVE-2019-6112 Scanner

Detects 'Cross-Site Scripting (XSS)' vulnerability in Sell Media plugin for WordPress affects v. 2.4.1.


Short Info



Single Scan

Single Scan

Can be used by

Asset Owner

Estimated Time

15 sec

Scan only one




Sell Media Plugin for WordPress is a popular plugin that allows photographers, artists, and graphic designers to create an online store on their WordPress website and sell their digital products such as photos, videos, and audio files. With its user-friendly interface, users can easily upload their digital goods, set their prices, and manage their sales from one central location.

However, the plugin was found to contain a severe vulnerability, CVE-2019-6112, that could potentially put the website at risk. This vulnerability can be exploited by attackers using Cross-site scripting (XSS) techniques to inject arbitrary web script or HTML via the keyword parameter in the search field.

Exploiting this vulnerability can lead to several serious consequences such as stealing users' sensitive information, hijacking their accounts, spreading malware, and gaining unauthorized access to the website's backend. Attackers can also use this vulnerability to redirect the user to a malicious site and perform phishing attacks, which puts the user's data and personal information at risk.

In conclusion, it is essential for website owners to stay informed about the vulnerabilities and risks affecting their digital assets. The pro features of offer a comprehensive and effective solution to identify, assess, and manage the vulnerabilities and risks that may affect your online business. By using the service, you can be confident in the security of your digital assets and focus on growing your business.



cyber security services for everyone one. Free security tools, continuous vulnerability scanning and many more.
Try it yourself,
control security posture