Known vulnerabilities in the Wicked Folders plugin
22 security advisories have been published for the Wicked Folders plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Wicked Folders - Security Vulnerability (CVE-2026-1883) MEDIUM
- Wicked Folders - Cross-Site Request Forgery (CSRF) (CVE-2023-0729) MEDIUM
- Wicked Folders - Cross-Site Request Forgery (CSRF) (CVE-2023-0726) MEDIUM
- Wicked Folders - Cross-Site Request Forgery (CSRF) (CVE-2023-0725) MEDIUM
- Wicked Folders - Cross-Site Request Forgery (CSRF) (CVE-2023-0724) MEDIUM
- Wicked Folders - Cross-Site Request Forgery (CSRF) (CVE-2023-0722) MEDIUM
- Wicked Folders - Broken Access Control (CVE-2023-0720) MEDIUM
- Wicked Folders - Broken Access Control (CVE-2023-0717) MEDIUM
- Wicked Folders - Broken Access Control (CVE-2023-0716) MEDIUM
- Wicked Folders - Broken Access Control (CVE-2023-0715) MEDIUM
- Wicked Folders - Broken Access Control (CVE-2023-0711) MEDIUM
- Wicked Folders - Cross-Site Request Forgery (CSRF) (CVE-2023-0685) MEDIUM
- Wicked Folders - Broken Access Control (CVE-2023-0684) MEDIUM
- Wicked Folders - Broken Access Control (CVE-2023-0718) MEDIUM
- Wicked Folders - Cross-Site Request Forgery (CSRF) (CVE-2023-0730) MEDIUM
- Wicked Folders - Cross-Site Request Forgery (CSRF) (CVE-2023-0727) MEDIUM
- Wicked Folders - Cross-Site Request Forgery (CSRF) (CVE-2023-0723) MEDIUM
- Wicked Folders - Broken Access Control (CVE-2023-0719) MEDIUM
- Wicked Folders - Broken Access Control (CVE-2023-0712) MEDIUM
- Wicked Folders - Cross-Site Request Forgery (CSRF) (CVE-2023-0728) MEDIUM
- Wicked Folders - Broken Access Control (CVE-2023-0713) MEDIUM
- Wicked Folders - SQL Injection (CVE-2021-24919) HIGH