Media Library Folders
- Software type
- Other
- Total vulnerabilities (90 days)
- 0
Unreliable vulnerability data
en
Verify to analyze this security profile
As of 10/25/2026, Media Library Folders recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Media Library Folders and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-2312Media Library Folders <= 8.3.6 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Attachment Deletion and RenameCVE-2025-0935Media Library Folders <= 8.3.0 - Missing Authorization to Plugin Settings ChangeCVE-2024-7858Media Library Folders <= 8.2.3 - Missing Authorization on Various FunctionsCVE-2024-7857Media Library Folders <= 8.2.2 - Authenticated (Subscriber+) Second-Order SQL InjectionCVE-2024-3615Media Library Folders <= 8.2.0 - Reflected Cross-Site Scripting via 's'| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-2312Media Library Folders <= 8.3.6 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Attachment Deletion and Rename | Exploitation statusNot exploited | FixYes | Published02/14/2026 | SeverityMedium |
CVE-2025-0935Media Library Folders <= 8.3.0 - Missing Authorization to Plugin Settings Change | Exploitation statusNot exploited | FixYes | Published02/15/2025 | SeverityMedium |
CVE-2024-7858Media Library Folders <= 8.2.3 - Missing Authorization on Various Functions | Exploitation statusNot exploited | FixYes | Published08/30/2024 | SeverityMedium |
CVE-2024-7857Media Library Folders <= 8.2.2 - Authenticated (Subscriber+) Second-Order SQL Injection | Exploitation statusNot exploited | FixYes | Published08/29/2024 | SeverityMedium |
CVE-2024-3615Media Library Folders <= 8.2.0 - Reflected Cross-Site Scripting via 's' | Exploitation statusNot exploited | FixYes | Published04/19/2024 | SeverityMedium |
5 Results | Page 1 of 1