wickedplugins Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types

• CVE-2026-1883 Medium 4.3 Wicked Folders <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Folder Deletion 0.2%
• CVE-2023-0729 Medium 5.4 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order 0.3%
• CVE-2023-0726 Medium 5.4 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder 0.3%
• CVE-2023-0722 Medium 5.4 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state 0.3%
• CVE-2023-0684 Medium 5.4 Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders 0.6%
• CVE-2023-0715 Medium 5.4 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder 0.6%
• CVE-2023-0711 Medium 5.4 Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state 0.6%
• CVE-2023-0717 Medium 5.4 Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder 0.6%
• CVE-2023-0725 Medium 5.4 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder 0.3%
• CVE-2023-0724 Medium 5.4 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder 0.3%
• CVE-2023-0685 Medium 5.4 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders 0.3%
• CVE-2023-0720 Medium 5.4 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order 0.6%
• CVE-2023-0716 Medium 5.4 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder 0.6%
• CVE-2023-0718 Medium 5.4 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder 0.6%
• CVE-2023-0723 Medium 5.4 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object 0.3%
• CVE-2023-0712 Medium 5.4 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object 0.6%
• CVE-2023-0719 Medium 5.4 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order 0.6%
• CVE-2023-0730 Medium 5.4 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_order 0.3%
• CVE-2023-0727 Medium 5.4 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folder 0.3%
• CVE-2023-0713 Medium 5.4 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folder 0.6%
• CVE-2023-0728 Medium 5.4 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folder 0.3%