4.3
Medium
CVE-2025-0935 The Media Library Folders plugin for WordPress is vulnerable to unauthorized plugin settings change due to a missing…
Description
The Media Library Folders plugin for WordPress is vulnerable to unauthorized plugin settings change due to a missing capability check on several AJAX actions in all versions up to, and including, 8.3.0. This makes it possible for authenticated attackers, with Author-level access and above, to change plugin settings related to things such as IP-blocking.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Media Library Folders 8.3 | earliest → 8.3.0 | No fix stated |
Other CVEs of Media Library Folders
The 5 CVEs of Media Library Folders →
CVE-2026-2312
The Media Library Folders plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up…
4.3
Medium
CVE-2024-7858
The Media Library Folders plugin for WordPress is vulnerable to unauthorized access due to missing capability checks…
6.3
Medium
CVE-2024-7857
The Media Library Folders plugin for WordPress is vulnerable to second order SQL Injection via the 'sort_type' parameter…
6.5
Medium
CVE-2024-3615
The Media Library Folders plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter…
6.1
Medium