Plugin icon

Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types

wicked-folders

Vulnerabilities:

4

Last Updated:

December 4, 2025

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-03-14
Title
Wicked Folders < 4.1.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Folder Deletion
Fixed in
Fixed in 4.1.1
CVSS
2.7 (low)
Published
2023-02-07
Title
Wicked Folders < 2.18.17 - Subscriber+ Folder Structure Update
Fixed in
Fixed in 2.18.17
CVSS
4.3 (medium)
Published
2023-02-07
Title
Wicked Folders < 2.18.17 - Folder Structure Update via CSRF
Fixed in
Fixed in 2.18.17
CVSS
4.3 (medium)
Published
2022-01-03
Title
Wicked Folders < 2.8.10 - Subscriber+ SQL Injection
Fixed in
Fixed in 2.8.10
CVSS
7.7 (high)