Input validation vulnerability in Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager 3.0.2

The Folders Pro plugin for WordPress has a security issue where someone can inject harmful code into a website through a user’s First Name and Last Name. This can happen in all versions up to 3.0.2 because the plugin does not properly clean and protect the input and output. This means that someone with certain levels of access can add code that will run whenever someone visits a page with the injected code.