Access violation vulnerability in MediaCommander – Bring Folders to Media, Posts, and Pages 2.3.1

The MediaCommander plugin for WordPress has a security vulnerability that allows unauthorized users to delete important data. This is because the plugin does not check for proper authorization before allowing the deletion of folders through the import-csv feature. This means that attackers with Author-level access or higher can delete all folder organization data, including data created by Administrators and other users.