Skip to content
Wickedplugins vulnerabilities
Newest
-
wickedplugins wicked folders – folder organizer for pages, posts, and custom post types
Wicked Folders <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Folder Deletion
CVE-2026-1883
4.3 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order
CVE-2023-0729
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder
CVE-2023-0726
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state
CVE-2023-0722
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders
CVE-2023-0684
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder
CVE-2023-0715
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state
CVE-2023-0711
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder
CVE-2023-0717
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder
CVE-2023-0725
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder
CVE-2023-0724
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders
CVE-2023-0685
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order
CVE-2023-0720
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder
CVE-2023-0716
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder
CVE-2023-0718
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object
CVE-2023-0723
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object
CVE-2023-0712
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order
CVE-2023-0719
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_order
CVE-2023-0730
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folder
CVE-2023-0727
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folder
CVE-2023-0713
5.4 Medium
-
wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 more
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folder
CVE-2023-0728
5.4 Medium
-
wickedplugins wicked folders
Wicked Folders < 2.18.10 - Subscriber+ SQL Injection
CVE-2021-24919
8.8 High