WordPress security by component

MediaCommander – Bring Folders to Media, Posts, and Pages

Plugin description

MediaCommander – Bring Folders to Media, Posts, and Pages is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Dec 13, 2025; the highest CVE/CNA score is 6.5.

Plugin slug: mediacommander

Latest vulnerability

CVE-2025-14508: MediaCommander – Bring Folders to Media, Posts, and Pages: A security weakness

MediaCommander – Bring Folders to Media, Posts, and Pages is affected by a security weakness. Exploitation requires at least author-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedDec 13, 2025

Safe version guidanceSee mitigation notes

		Safe version
Dec 13, 2025	CVE-2025-14508 MediaCommander – Bring Folders to Media, Posts, and Pages: A security weakness MediaCommander – Bring Folders to Media, Posts, and Pages is affected by a security weakness. Exploitation requires at least author-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE6.5 NVDPending