WordPress security by component
Media Library Folders
Plugin description
Media Library Folders is a WordPress component with 6 published CVE records in this archive. The latest tracked vulnerability was published Feb 15, 2025; the highest CVE/CNA score is 8.5.
Plugin slug:
media-library-plusLatest vulnerability
CVE-2025-0935: Media Library Folders: A security weakness
Media Library Folders is affected by a security weakness. Exploitation requires at least author-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
| Safe version |
|
||
|---|---|---|---|
| Feb 15, 2025 |
CVE-2025-0935
Media Library Folders: A security weakness
Media Library Folders is affected by a security weakness. Exploitation requires at least author-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Aug 30, 2024 |
CVE-2024-7858
Media Library Folders: A security weakness
Media Library Folders is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.3
NVDPending
|
| Aug 29, 2024 |
CVE-2024-7857
Media Library Folders: SQL injection
Media Library Folders is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE6.5
NVD6.5
|
| Apr 10, 2024 |
CVE-2024-31287
Media Library Folders: Filesystem traversal
Media Library Folders is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE6.5
NVD6.5
|
| Mar 29, 2024 |
CVE-2024-30486
Media Library Folders: SQL injection
Media Library Folders is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE8.5
NVD8.8
|
| Nov 18, 2022 |
CVE-2022-41634
Media Library Plus: Cross-site request forgery
Media Library Plus is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE5.4
NVD8.8
|