Skip to content
OpenAdvisories

Vendor

yalogica

1 known vulnerabilities.

Products

MediaCommander – Bring Folders to Media, Posts, and Pages 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-14508

    MediaCommander – Bring Folders to Media, Posts, and Pages <= 2.3.1 - Missing Authorization to Authenticated (Author+) Media Folder Deletion

    The MediaCommander – Bring Folders to Media, Posts, and Pages plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the import-csv REST API endpoint in all versions up to, and including, 2.3.1. This is due to th…

    yalogica MediaCommander – Bring Folders to Media, Posts, and Pages Web / CMS