24 matches found
CVE-2026-19717
The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its REST API endpoints, allowing unauthenticated users to retrieve the title, type, size and URL of the media attachments assigned to any of its folders, including folders whi...
CVE-2026-19717 CatFolders Document Gallery < 2.0.7 - Unauthenticated Attachment Disclosure via REST API
The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its REST API endpoints, allowing unauthenticated users to retrieve the title, type, size and URL of the media attachments assigned to any of its folders, including folders whi...
CVE-2026-19717
The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its REST API endpoints, allowing unauthenticated users to retrieve the title, type, size and URL of the media attachments assigned to any of its folders, including folders whi...
EUVD-2026-59917
The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its REST API endpoints, allowing unauthenticated users to retrieve the title, type, size and URL of the media attachments assigned to any of its folders, including folders whi...
CVE-2026-19717
The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 lacks authorisation checks on certain REST API endpoints, allowing unauthenticated attackers to enumerate and retrieve the title, type, size and URL of all media attachments, including unpublished folders. No in-the-wild ...
๐ WordPress CatFolders 2.5.2 SQL Injection
WordPress CatFolders plugin versions 2.5.2 and below suffer from a remote SQL injection vulnerability. CVE-2025-9776: Authenticated SQL Injection in CatFolders WordPress Plugin Keywords: CVE-2025-9776, CatFolders WordPress vulnerability, SQL injection WordPress, authenticated SQL injection,...
CVE-2025-66120
Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: from n/a through = 2.5.3...
EUVD-2025-203589
Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: from n/a through = 2.5.3...
CVE-2025-66120
Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: from n/a through = 2.5.3...
CVE-2025-66120 WordPress CatFolders plugin <= 2.5.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: from n/a through = 2.5.3...
CVE-2025-66120
CVE-2025-66120 corresponds to a Missing Authorization/Broken Access Control vulnerability in the WordPress CatFolders plugin (versions up to and including 2.5.3). The issue affects CatFolders โ WordPress Media Library Folders & Categories, with a CVSS v3.1 base score of 5.3 (Medium) and an attack...
CVE-2025-66120 WordPress CatFolders plugin <= 2.5.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: from n/a through = 2.5.3...
PT-2025-51409
Name of the Vulnerable Software and Affected Versions CatFolders versions through 2.5.3 Description An authorization issue exists in CatFolders that allows exploitation of incorrectly configured access control security levels. Recommendations Update to a version later than 2.5.3...
WordPress plugin CatFolders ๅฎๅ จๆผๆด
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...
WordPress CatFolders plugin <= 2.5.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin CatFolders versions = 2.5.3...
EUVD-2025-28906
Malicious code in bioql PyPI...
Exploit for CVE-2025-9776
CVE-2025-9776 โ CatFolders WordPress Plugin: Authenticated SQL...
CVE-2025-9776
The CatFolders โ Tame Your WordPress Media Library by Category plugin for WordPress is vulnerable to time-based SQL Injection via the CSV Import contents in all versions up to, and including, 2.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...
CVE-2025-9776
The CatFolders โ Tame Your WordPress Media Library by Category plugin for WordPress is vulnerable to time-based SQL Injection via the CSV Import contents in all versions up to, and including, 2.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...