WordPress plugin

CatFolders – WordPress Media Library Folders & Categories security & vulnerabilities

Q: Is any CatFolders – WordPress Media Library Folders & Categories vulnerability listed in CISA KEV?

No. None of the known CatFolders – WordPress Media Library Folders & Categories vulnerabilities is currently listed in the CISA KEV catalog.

catfolders— active installsLast vulnerability Nov 3, 2026

No known unpatched vulnerabilities in the latest version

All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

4Known vulnerabilities

Critical0
High0
Medium4
Low0

Vulnerabilities per year

All CatFolders – WordPress Media Library Folders & Categories vulnerabilities

CatFolders – WordPress Media Library Folders & Categories vulnerabilities
Severity	Vulnerability	CVE	Published
Medium6.5	Authenticated (Author+) SQL Injection ≤2.5.6Update to 2.5.7	CVE-2026-107786	Nov 03
Medium4.3	Missing Authorization ≤2.5.6Update to 2.5.7	CVE-2026-107787	Nov 03
Medium5.3	Missing Authorization ≤2.5.3Update to 2.5.4	CVE-2025-66120	Nov 30, 2025
Medium6.5	Authenticated (Author+) SQL Injection via CSV Import ≤2.5.2Update to 2.5.3	CVE-2025-9776	Sep 10, 2025

Medium6.5
Authenticated (Author+) SQL Injection
≤2.5.6Update to 2.5.7
CVE-2026-107786Nov 03
Medium4.3
Missing Authorization
≤2.5.6Update to 2.5.7
CVE-2026-107787Nov 03
Medium5.3
Missing Authorization
≤2.5.3Update to 2.5.4
CVE-2025-66120Nov 30, 2025
Medium6.5
Authenticated (Author+) SQL Injection via CSV Import
≤2.5.2Update to 2.5.3
CVE-2025-9776Sep 10, 2025

CatFolders – WordPress Media Library Folders & Categories: common questions

Does CatFolders – WordPress Media Library Folders & Categories have known vulnerabilities?

Yes. VulnCrest Radar lists 4 known vulnerabilities in CatFolders – WordPress Media Library Folders & Categories: 4 medium. None are known to affect version null.

How do I check which version of CatFolders – WordPress Media Library Folders & Categories I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent CatFolders – WordPress Media Library Folders & Categories vulnerability?

CVE-2026-107786, published Nov 3, 2026: CatFolders <= 2.5.6 - Authenticated (Author+) SQL Injection. Severity: Medium (CVSS 6.5).

Is any CatFolders – WordPress Media Library Folders & Categories vulnerability listed in CISA KEV?

No. None of the known CatFolders – WordPress Media Library Folders & Categories vulnerabilities is currently listed in the CISA KEV catalog.