Description
Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| dbarrere | WP Media folders | ≤ 1.1.10 | — |
High · 8.8
CVE-2026-118075
EUVD-2026-112992GHSA-mhf5-397r-h4r7
WordPress WP Media folders plugin <= 1.1.10 - PHP Object Injection vulnerability
Published Oct 29, 2026 · Updated Oct 29, 2026 · Assigned by Patchstack