Mediamatic – Media Library Folders
Mediamatic – Media Library Folders has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2023; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 7.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2022 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (50%). Other recurring categories include Missing Authorization, SQL Injection.
2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2022.
3 independent researchers contributed these findings, most of them (2) reported by Marco Wotschka. Mediamatic – Media Library Folders is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2023-0294Mediamatic – Media Library Folders <= 2.8.1 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
Mediamatic – Media Library Folders
Author
plugincraft
Mediamatic is a high-performance, React-based WordPress plugin that helps you keep your media library organized — no matter how many thousands of images, videos, audio files, or documents you have. Live Demo — Try it for yourself! 🗂️ Core Features (Free) Unlimited Root-Level Folders — Organize your media library without limits. Drag & Drop — Effortlessly move media between folders or reorder them. Media File Replacement — Replace any media file while preserving its URL and all database references. CSV Export — Easily export your folder structure for backup or migration. Folder Panel in Post Types — Use the folder system within your posts and pages. Page Builder Friendly — Seamlessly works inside Gutenberg, Elementor, WPBakery, Beaver Builder, and Divi. 🚀 Upgrade to Mediamatic Pro Take your media organization to the next level with our professional-grade features: Nested Subfolders — Create a deep hierarchy of folders and subfolders. Folder Colors — Color-code your folders for instant visual recognition. Private Per-User Folders — Let each user manage their own private folder structure. Role-Based Permissions — Granularly control who can create, edit, or delete folders. Download Folder as ZIP — Quickly download entire folders as a single archive. Duplicate Folders — Clone folder structures with a single click. Breadcrumb Navigation — Navigate large folder hierarchies with ease. Smart Imports — Import existing folders from CSV, FileBird, or Folders (Premio). Automatic Backups — Peace of mind with daily automated folder structure backups. Workflow Optimization — Remembers your last active folder for faster uploading.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C