CVE-2025-28948

CVE-2025-28948: A CSRF-to-Reflected-XSS issue in Mediabay – WordPress Media Library Folders (WordPress plugin) affects versions = 1.4 or a stated fixed version.

WordPress Mediabay - WordPress Media Library Folders plugin <= 1.4 - CSRF to Reflected XSS vulnerability

WordPress Mediabay - WordPress Media Library Folders plugin = 1.4 - CSRF to Reflected XSS vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin Mediabay - WordPress Media Library Folders versions = 1.4...