High · 8.5 CVE-2024-30486 EUVD-2024-28406GHSA-f37h-g74v-g4mp

WordPress Media Library Folders plugin <= 8.1.7 - Auth. SQL Injection vulnerability

Published Mar 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Max Foundry Product: Media Library Folders

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Max Foundry Media Library Folders.This issue affects Media Library Folders: from n/a through 8.1.7.

Affected products

Vendor	Product	Affected	Fixed
Max Foundry	Media Library Folders	≤ 8.1.7	—

References

https://patchstack.com/database/vulnerability/media-library-plus/wordpress-media-library-folders-plugin-8-1-7-author-sql-injection-vulnerability?_s_id=cve vdb-entry