4.3
Moyenne
CVE-2025-0935 The Media Library Folders plugin for WordPress is vulnerable to unauthorized plugin settings change due to a missing…
Description
The Media Library Folders plugin for WordPress is vulnerable to unauthorized plugin settings change due to a missing capability check on several AJAX actions in all versions up to, and including, 8.3.0. This makes it possible for authenticated attackers, with Author-level access and above, to change plugin settings related to things such as IP-blocking.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Media Library Folders 8.3 | premières → 8.3.0 | Pas de correctif indiqué |
Autres CVE de Media Library Folders
Les 5 CVE de Media Library Folders →
CVE-2026-2312
The Media Library Folders plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up…
4.3
Moyenne
CVE-2024-7858
The Media Library Folders plugin for WordPress is vulnerable to unauthorized access due to missing capability checks…
6.3
Moyenne
CVE-2024-7857
The Media Library Folders plugin for WordPress is vulnerable to second order SQL Injection via the 'sort_type' parameter…
6.5
Moyenne
CVE-2024-3615
The Media Library Folders plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter…
6.1
Moyenne