Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
media-library-plus
WordPress
· Plugin
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Media Library Folders <= 8.3.6 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Attachment Deletion and Rename
CVE-2026-2312
media-library-plus
WordPress
Medium
Fix reported
2026-02-14
Media Library Folders <= 8.3.0 - Missing Authorization to Plugin Settings Change
CVE-2025-0935
media-library-plus
WordPress
Medium
Fix reported
2025-02-15
Media Library Folders <= 8.2.2 - Authenticated (Subscriber+) Second-Order SQL Injection
CVE-2024-7857
media-library-plus
WordPress
Medium
Fix reported
2025-02-01
Media Library Folders <= 8.2.3 - Missing Authorization on Various Functions
CVE-2024-7858
media-library-plus
WordPress
Medium
Fix reported
2024-08-30
Media Library Folders <= 8.2.0 - Reflected Cross-Site Scripting via 's'
CVE-2024-3615
media-library-plus
WordPress
Medium
Fix reported
2024-04-19
Media Library Folders <= 8.1.8 - Authenticated (Author+) Directory Traversal
CVE-2024-31287
media-library-plus
WordPress
Medium
Fix reported
2024-04-11
Media Library Folders <= 8.1.7 - Authenticated (Author+) SQL Injection
CVE-2024-30486
media-library-plus
WordPress
Critical
Fix reported
2024-04-04
Media Library Folders <= 7.1.1 - Cross-Site Request Forgery
CVE-2022-41634
media-library-plus
WordPress
High
Fix reported
2024-01-22
