Threat Database

Threat Entry Updated 2026-06-17

Mediabay - WordPress Media Library Folders - SQL Injection (CVE-2025-28949)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codedraft Mediabay - WordPress Media Library Folders allows Blind SQL Injection.This issue affects Mediabay - WordPress Media Library Folders: from n/a through 1.4.

PLUGIN Mediabay - WordPress Media Library Folders

CVE-2025-28949

HIGH CVSS 8.5 2025-12-31

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Mediabay - WordPress Media Library Folders - Cross-Site Scripting (XSS) (CVE-2025-28948)

Cross-Site Request Forgery (CSRF) vulnerability in codedraft Mediabay - WordPress Media Library Folders allows Reflected XSS. This issue affects Mediabay - WordPress Media Library Folders: from n/a through 1.4.

PLUGIN Mediabay - WordPress Media Library Folders

CVE-2025-28948

HIGH CVSS 7.1 2025-06-06

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Mediabay Wordpress Media Library Folders - Cross-Site Scripting (XSS) (CVE-2023-46066)

Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Codedrafty Mediabay – Media Library Folders plugin

PLUGIN Mediabay Wordpress Media Library Folders

CVE-2023-46066

MEDIUM CVSS 5.9 2023-10-16

Risk Score

Open Full Technical Breakdown