EUVD-2026-50114

The wp-media-folder-addon WordPress plugin through 4.1.6 does not validate a user-supplied parameter before using it in a file read operation in two AJAX actions available to unauthenticated users, leading to Arbitrary File Disclosure and Server-Side Request Forgery on sites where a cloud storage...

CVE-2026-9690

creationtimestamp| type| source ---|---|--- 2026-06-21 06:16:33+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3morpvtxs5e2s...