What’s Vulnerable › Products

premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager version is affected

Latest premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager vulnerabilities

• CVE-2025-12640 — Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.1.5 - Missing Authorization to Authenticated (Author+) Media Replacement (CVSS 4.3)
• CVE-2025-12971 — Folders <= 3.1.5 - Incorrect Authorization to Authenticated (Contributor+) Folder Content Manipulation (CVSS 4.3)
• CVE-2024-7317 — Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager <= 3.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload (CVSS 5.4)
• CVE-2024-2023 — Folders <= 3.0 and Folders Pro <= 3.0.2 - Directory Traversal via handle_folders_file_upload (CVSS 4.3)
• CVE-2024-3868 — Folders Pro <= 3.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User First Name and Last Name (CVSS 5.4)
• CVE-2023-40204 — WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload (CVSS 7.2)