CVE-2025-0935

Summary

CVE-2025-0935 is a vulnerability affecting the Media Library Folders plugin for WordPress.This issue allows authenticated attackers with Author-level access or higher to modify plugin settings without proper capability checks on specific AJAX actions.Impacted versions include those up to and including 8.3.0. The unchecked changes can influence settings related to IP-blocking, posing a potential security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.