Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Wicked Folders 2.18.16

  • Severity: medium-risk
  • Status: Fixed
  • Publication: February 7, 2023

The Wicked Folders plugin for WordPress has a security vulnerability in versions up to 2.18.16. This means that unauthenticated attackers can do things like change the folder structure of the plugin without being authorized to do so. This is because the plugin does not have a proper system in place to make sure that only authorized people can make changes. This can happen if an attacker is able to get a site administrator to click on a link that the attacker has made.

Detected in:

Wicked Folders fixed vulnerable versions: >= * <= 2.18.16
Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.