Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:29:58 +0000 CVE-2025-12971 — Folders <= 3.1.5 - Incorrect Authorization to Authenticated (Contributor+) Folder Content Manipulation https://cve.radiocsirt.org/vuln/cve-2025-12971 <p><strong>Affected:</strong> premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager</p> <p>The Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on the &#39;wcp_change_post_folder&#39; function in all versions up to, and including, 3.1.5. This makes it possible for authenticated attackers, with Contributor-level access and above, to move arbitrary folder contents to arbitrary folders.</p> <p><strong>Affected:</strong> premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager</p> <p>The Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on the &#39;wcp_change_post_folder&#39; function in all versions up to, and including, 3.1.5. This makes it possible for authenticated attackers, with Contributor-level access and above, to move arbitrary folder contents to arbitrary folders.</p> https://cve.radiocsirt.org/vuln/cve-2025-12971