Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
folders
WordPress
· Plugin
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.1.5 - Missing Authorization to Authenticated (Author+) Media Replacement
CVE-2025-12640
folders
WordPress
Medium
Fix reported
2026-01-08
Folders <= 3.1.5 - Incorrect Authorization to Authenticated (Contributor+) Folder Content Manipulation
CVE-2025-12971
folders
WordPress
Medium
Fix reported
2025-11-27
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-7317
folders
WordPress
Medium
Fix reported
2024-08-06
Folders <= 3.0 and Folders Pro <= 3.0.2 - Directory Traversal via handle_folders_file_upload
CVE-2024-2023
folders-pro
folders
WordPress
Medium
Fix reported
2024-06-14
Folders Pro <= 3.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User First Name and Last Name
CVE-2024-3868
folders
WordPress
Medium
Fix reported
2024-05-04
Folders <= 2.9.2 - Authenticated (Author+) Arbitrary File Upload in handle_folders_file_upload
CVE-2023-40204
folders
WordPress
High
Fix reported
2024-01-22
Folders <= 2.9.2 - Authenticated (Author+) Arbitrary File Upload
folders
WordPress
High
Fix reported
2024-01-22