Codedraft
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Mediabay - WordPress Media Library Folders | 2 | – | Dec 31, 2025 |
| Mediabay | 1 | – | Jan 2, 2025 |
Exploited and recent CVEs
- CVE-2025-28949 WordPress Mediabay - WordPress Media Library Folders <= 1.4 - SQL Injection Vulnerability 0.2%
- CVE-2025-28948 WordPress Mediabay - WordPress Media Library Folders plugin <= 1.4 - CSRF to Reflected XSS vulnerability 0.1%
- CVE-2023-46612 WordPress Mediabay plugin <= 1.6 - Broken Access Control vulnerability 0.4%