Lucene search
K

19 matches found

Packet Storm
Packet Storm
added 2026/05/08 12:0 a.m.67 views

📄 WordPress CatFolders 2.5.2 SQL Injection

WordPress CatFolders plugin versions 2.5.2 and below suffer from a remote SQL injection vulnerability. CVE-2025-9776: Authenticated SQL Injection in CatFolders WordPress Plugin Keywords: CVE-2025-9776, CatFolders WordPress vulnerability, SQL injection WordPress, authenticated SQL injection,...

6.5CVSS5.9AI score0.00347EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2025/12/17 10:2 a.m.3 views

CVE-2025-66120

Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: from n/a through = 2.5.3...

5.3CVSS7AI score0.00221EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/16 9:31 a.m.3 views

EUVD-2025-203589

Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: from n/a through = 2.5.3...

5.3CVSS6.5AI score0.00221EPSS
Exploits0References2
NVD
NVD
added 2025/12/16 9:15 a.m.2 views

CVE-2025-66120

Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: from n/a through = 2.5.3...

5.3CVSS0.00221EPSS
Exploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.5 views

CVE-2025-66120

CVE-2025-66120 corresponds to a Missing Authorization/Broken Access Control vulnerability in the WordPress CatFolders plugin (versions up to and including 2.5.3). The issue affects CatFolders – WordPress Media Library Folders & Categories, with a CVSS v3.1 base score of 5.3 (Medium) and an attack...

5.3CVSS6.6AI score0.00221EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/16 8:12 a.m.29 views

CVE-2025-66120 WordPress CatFolders plugin <= 2.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: from n/a through = 2.5.3...

5.3CVSS0.00221EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.2 views

CVE-2025-66120 WordPress CatFolders plugin <= 2.5.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: from n/a through = 2.5.3...

6.6AI score0.00221EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.3 views

PT-2025-51409

Name of the Vulnerable Software and Affected Versions CatFolders versions through 2.5.3 Description An authorization issue exists in CatFolders that allows exploitation of incorrectly configured access control security levels. Recommendations Update to a version later than 2.5.3...

5.3CVSS6.6AI score0.00221EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.3 views

WordPress plugin CatFolders 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.4AI score0.00221EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/11/30 3:49 a.m.4 views

WordPress CatFolders plugin <= 2.5.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin CatFolders versions = 2.5.3...

5.3CVSS7AI score0.00221EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-28906

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00347EPSS
Exploits2References4
GithubExploit
GithubExploit
added 2025/09/13 6:24 a.m.208 views

Exploit for CVE-2025-9776

CVE-2025-9776 — CatFolders WordPress Plugin: Authenticated SQL...

6.5CVSS7.8AI score0.00347EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2025/09/13 5:19 a.m.12 views

CVE-2025-9776

The CatFolders – Tame Your WordPress Media Library by Category plugin for WordPress is vulnerable to time-based SQL Injection via the CSV Import contents in all versions up to, and including, 2.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

6.5CVSS6.6AI score0.00347EPSS
Exploits2References1
NVD
NVD
added 2025/09/11 5:15 a.m.8 views

CVE-2025-9776

The CatFolders – Tame Your WordPress Media Library by Category plugin for WordPress is vulnerable to time-based SQL Injection via the CSV Import contents in all versions up to, and including, 2.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

6.5CVSS0.00347EPSS
Exploits2References3
Cvelist
Cvelist
added 2025/09/11 4:26 a.m.14 views

CVE-2025-9776 CatFolders – Tame Your WordPress Media Library by Category <= 2.5.2 - Authenticated (Author+) SQL Injection via CSV Import

The CatFolders – Tame Your WordPress Media Library by Category plugin for WordPress is vulnerable to time-based SQL Injection via the CSV Import contents in all versions up to, and including, 2.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

6.5CVSS0.00347EPSS
Exploits2References3
Vulnrichment
Vulnrichment
added 2025/09/11 4:26 a.m.9 views

CVE-2025-9776 CatFolders – Tame Your WordPress Media Library by Category <= 2.5.2 - Authenticated (Author+) SQL Injection via CSV Import

The CatFolders – Tame Your WordPress Media Library by Category plugin for WordPress is vulnerable to time-based SQL Injection via the CSV Import contents in all versions up to, and including, 2.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

6.5CVSS6.2AI score0.00347EPSS
Exploits2References3
CVE
CVE
added 2025/09/11 4:26 a.m.29 views

CVE-2025-9776

CVE-2025-9776 – CatFolders WordPress plugin (versions

6.5CVSS6.2AI score0.00347EPSS
Exploits2References3
Patchstack
Patchstack
added 2025/09/11 12:56 a.m.10 views

WordPress CatFolders plugin <= 2.5.2 - Authenticated (Author+) SQL Injection via CSV Import vulnerability

Authenticated Author+ SQL Injection via CSV Import vulnerability discovered by SnailSploit in WordPress Plugin CatFolders versions = 2.5.2...

6.5CVSS7.8AI score0.00347EPSS
Exploits2References1Affected Software1
CNNVD
CNNVD
added 2025/09/11 12:0 a.m.8 views

WordPress plugin CatFolders SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

6.5CVSS7.5AI score0.00347EPSS
Exploits2References3
Rows per page
Query Builder