Plex

Plex operates a media server platform widely deployed in home and small-business environments for streaming music, video, and photos, where its internet-facing nature and authentication mechanisms present a concentrated attack surface. Vulnerabilities affecting the vendor skew toward serious outcomes and frequently acquire public exploit code; the vendor also carries a moderate tendency toward confirmed in-the-wild exploitation. The recurring exposure centers on authorization and access-control weaknesses—including improper authorization, path traversal, untrusted deserialization, and XXE—that reflect the challenges of building a feature-rich media-serving application with remote access. Current exploitation activity, severity distribution, and vulnerability counts are shown alongside this summary.