Plugin icon

Media Library Folders

media-library-plus

Vulnerabilities:

8

Last Updated:

May 21, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-02-13
Title
Media Library Folders < 8.3.7 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Attachment Deletion and Rename
Fixed in
Fixed in 8.3.7
CVSS
4.3 (medium)
Published
2025-02-14
Title
Media Library Folders < 8.3.1 - Missing Authorization to Plugin Settings Change
Fixed in
Fixed in 8.3.1
CVSS
4.3 (medium)
Published
2024-08-29
Title
Media Library Folders < 8.2.4 - Missing Authorization on Various Functions
Fixed in
Fixed in 8.2.4
CVSS
6.3 (medium)
Published
2024-08-28
Title
Media Library Folders < 8.2.3 - Authenticated (Subscriber+) Second-Order SQL Injection
Fixed in
Fixed in 8.2.3
CVSS
9.8 (critical)
Published
2024-04-18
Title
Media Library Folders < 8.2.1 - Reflected Cross-Site Scripting via 's'
Fixed in
Fixed in 8.2.1
CVSS
6.1 (medium)
Published
2024-04-05
Title
Media Library Folders < 8.1.9 - Authenticated (Author+) Directory Traversal
Fixed in
Fixed in 8.1.9
CVSS
4.3 (medium)
Published
2024-03-28
Title
Media Library Folders < 8.1.8 - Authenticated (Author+) SQL Injection
Fixed in
Fixed in 8.1.8
CVSS
9.9 (critical)
Published
2022-09-30
Title
Media Library Folders < 7.1.2 - Plugin Reset via CSRF
Fixed in
Fixed in 7.1.2
CVSS
5.4 (medium)