Wp-media-folder-addon vulnerabilities
We track 1 vulnerability in Wp-media-folder-addon products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 29, 2026.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest Wp-media-folder-addon vulnerabilities
- 8.6 High severity
wp-media-folder-addon: Improper Limitation of a Pathname to a Restricted Directory
The wp-media-folder-addon WordPress plugin before 4.1.7 does not validate a user-supplied parameter before using it in a file read operation in two AJAX actions available to unauthenticated users, leading to Arbitrary File Disclosure and Server-Side Request Fo