Categorify – WordPress Media Library Category & File Manager

Categorify – WordPress Media Library Category & File Manager has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; 11 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 4.5, and the most serious one scores 6.3 out of 10. 2024 was the busiest year with 10 disclosures.

The most common weakness is Missing Authorization, behind 7 of the records (58%). Other recurring categories include Cross-Site Request Forgery (CSRF).

11 of the records (92%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, most of them (10) reported by Francesco Carlucci. Categorify – WordPress Media Library Category & File Manager is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.4.10.

Strategic Overview

Avg CVSSMedium

4.5/ 10

Patch Coverage92%

Open

Fixed

Get automatic notifications for all Categorify – WordPress Media Library Category & File Manager vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-59005

Categorify <= 1.0.7.5 - Missing Authorization

Read the full analysis

Vulnerability Records

12 records


2025-09-08 00:00	Categorify <= 1.0.7.5 - Missing Authorization Categorify <= 1.0.7.5	`CVE-2025-59005`	4.3 Medium	Legion Hunter	No
2024-02-26 00:00	Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxDeleteCategory Categorify <= 1.0.7.4	`CVE-2024-1907`	4.3 Medium	Francesco Carlucci	Yes
2024-02-26 00:00	Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxAddCategory Categorify <= 1.0.7.4	`CVE-2024-0385`	4.3 Medium	Francesco Carlucci	Yes
2024-02-26 00:00	Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxUpdateFolderPosition Categorify <= 1.0.7.4	`CVE-2024-1653`	4.3 Medium	Francesco Carlucci	Yes
2024-02-26 00:00	Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxRenameCategory Categorify <= 1.0.7.4	`CVE-2024-1909`	4.3 Medium	Francesco Carlucci	Yes
2024-02-26 00:00	Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxUpdateFolderPosition Categorify <= 1.0.7.4	`CVE-2024-1912`	4.3 Medium	Francesco Carlucci	Yes
2024-02-26 00:00	Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxAddCategory Categorify <= 1.0.7.4	`CVE-2024-1906`	4.3 Medium	Francesco Carlucci	Yes
2024-02-26 00:00	Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxClearCategory Categorify <= 1.0.7.4	`CVE-2024-1652`	4.3 Medium	Francesco Carlucci	Yes
2024-02-26 00:00	Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxClearCategory Categorify <= 1.0.7.4	`CVE-2024-1910`	4.3 Medium	Francesco Carlucci	Yes
2024-02-26 00:00	Categorify <= 1.0.7.4 - Missing Authorization in categorifyAjaxDeleteCategory Categorify <= 1.0.7.4	`CVE-2024-1649`	4.3 Medium	Francesco Carlucci	Yes

Showing 1–10 of 12 reports

Latestv1.0.7.5

Categorify – WordPress Media Library Category & File Manager

Author

frenify

2.0(2)

40/100

Last Updated

2024-02-12 (3y ago)

Active Installs

1,000+

Downloads

28,732

Requires WP

6.0.0+

Requires PHP

Tested up to

WP 6.4.10

Created

2021-10-08 (5y ago)

⚡️ Easy to use media library plugin for all WordPress websites. Organize your WordPress media library files using a drag and drop organizer Features The plugin allows you to create virtual categories to organize your WordPress media file uploads. So when you move files and categories, that won’t break the permalinks to your images in the page/post content. Note: adding a image into a category will not change its permalinks. So How Does it Work? It’s rather simple really – once you install the plugin, you can begin using it. If you’re a content creator, you can upload text, images, videos, and audio at the click of a button. Then you can organize everything you upload into neat categories. It has a drag and drop interface, making it user-friendly for everyone. It’s like having your own media library at your own disposal. You can create this media library for yourself or others – it’s perfect for website owners and content professionals! GDPR AND PRIVACY Categorify plugin is GDPR compliant: We don’t store any visitor or user data We don’t send any data to remote servers Our plugin is only used to organize the WordPress media library Download this plugin today for free and organize your WP media content.

View on WordPress.org