What’s Vulnerable › Products
frenify Categorify – WordPress Media Library Category & File Manager vulnerabilities
12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.
Latest frenify Categorify – WordPress Media Library Category & File Manager vulnerabilities
- CVE-2025-59005 — WordPress Categorify plugin <= 1.0.7.5 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
- CVE-2024-0385 — Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxAddCategory (CVSS 4.3)
- CVE-2024-1912 — Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxUpdateFolderPosition (CVSS 4.3)
- CVE-2024-1910 — Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxClearCategory (CVSS 4.3)
- CVE-2024-1909 — Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxRenameCategory (CVSS 4.3)
- CVE-2024-1907 — Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxDeleteCategory (CVSS 4.3)
- CVE-2024-1906 — Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxAddCategory (CVSS 4.3)
- CVE-2024-1653 — Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxUpdateFolderPosition (CVSS 4.3)
- CVE-2024-1652 — Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxClearCategory (CVSS 4.3)
- CVE-2024-1650 — Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxRenameCategory (CVSS 4.3)
- CVE-2024-1649 — Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxDeleteCategory (CVSS 4.3)