CatFolders – WP Media Folders, CVE-2026-107787
- CVE, Research URL
- Home page URL
- Application
- Published on
- Nov 05, 2026
- Research Description
- The CatFolders WordPress plugin before 2.5.7 does not have authorisation checks on a folder maintenance action, allowing users with a role as low as subscriber to reset the per-user ownership of every media folder and disable the CatFolders WordPress plugin before 2.5.7's user restriction setting.
- Affected versions
-
max 2.5.7.
- Status
-
vulnerable