CVE-2024-7858

概要

参考情報

• plugins.trac.wordpress.org/browser/media-library-plus/trunk/media-library-plus.php · Product
• plugins.trac.wordpress.org/changeset · Patch
• wordfence.com/threat-intel/vulnerabilities/id/fcc0fc00-b7d6-429c-9ab3-f08971c48777 · Third Party Advisory

media library folders のその他の脆弱性

• CVE-2025-0935中 4.3The Media Library Folders plugin for WordPress is vulnerable to unauthorized plugin settings change due to a missing capability check on sev…
• CVE-2024-7857中 6.5The Media Library Folders plugin for WordPress is vulnerable to second order SQL Injection via the 'sort_type' parameter of the 'mlf_change_…
• CVE-2024-3615中 6.1The Media Library Folders plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, …
• CVE-2024-31287中 6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Max Foundry Media Library Folders.This issue…
• CVE-2024-30486高 8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Max Foundry Media Library Folders.This…