What’s Vulnerable › Products

maxfoundry Media Library Folders vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your maxfoundry Media Library Folders version is affected

Latest maxfoundry Media Library Folders vulnerabilities

• CVE-2026-2312 — Media Library Folders <= 8.3.6 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Attachment Deletion and Rename (CVSS 4.3)
• CVE-2025-0935 — Media Library Folders <= 8.3.0 - Missing Authorization to Plugin Settings Change (CVSS 4.3)
• CVE-2024-7858 — Media Library Folders <= 8.2.3 - Missing Authorization on Various Functions (CVSS 6.3)
• CVE-2024-7857 — Media Library Folders <= 8.2.2 - Authenticated (Subscriber+) Second-Order SQL Injection (CVSS 6.5)
• CVE-2024-3615 — Media Library Folders <= 8.2.0 - Reflected Cross-Site Scripting via 's' (CVSS 6.1)
• CVE-2024-31287 — WordPress Media Library Folders plugin <= 8.1.8 - Directory Traversal vulnerability (CVSS 6.5)
• CVE-2024-30486 — WordPress Media Library Folders plugin <= 8.1.7 - Auth. SQL Injection vulnerability (CVSS 8.8)
• CVE-2022-41634 — WordPress Media Library Folders plugin <= 7.1.1 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 8.8)