Skip to content
OpenAdvisories

Vendor

codedraft

3 known vulnerabilities.

Products

Mediabay - WordPress Media Library Folders 2 Mediabay 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2025-28949

    WordPress Mediabay - WordPress Media Library Folders <= 1.4 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codedraft Mediabay - WordPress Media Library Folders allows Blind SQL Injection.This issue affects Mediabay - WordPress Media Library Folders: from n/a throu…

    codedraft Mediabay - WordPress Media Library Folders Web / CMS
  • High 7.1
    CVE-2025-28948

    WordPress Mediabay - WordPress Media Library Folders plugin <= 1.4 - CSRF to Reflected XSS vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in codedraft Mediabay - WordPress Media Library Folders allows Reflected XSS. This issue affects Mediabay - WordPress Media Library Folders: from n/a through 1.4.

    codedraft Mediabay - WordPress Media Library Folders Web / CMS