ghsa-g4cm-95vw-hm27

github
Description

The CatFolders WordPress plugin before 2.5.7 does not have authorisation checks on a folder maintenance action, allowing users with a role as low as subscriber to reset the per-user ownership of every media folder and disable the CatFolders WordPress plugin before 2.5.7's user restriction setting.

Timeline
Published
unknown
Last Modified
unknown
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References
Linked Vulnerabilities

No linked vulnerabilities found.

{
  "affected": [],
  "aliases": [
    "CVE-2026-107787"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-11-05T06:17:07Z",
    "severity": null
  },
  "details": "The CatFolders  WordPress plugin before 2.5.7 does not have authorisation checks on a folder maintenance action, allowing users with a role as low as subscriber to reset the per-user ownership of every media folder and disable the CatFolders  WordPress plugin before 2.5.7's user restriction setting.",
  "id": "GHSA-g4cm-95vw-hm27",
  "modified": "2026-11-05T06:34:37Z",
  "published": "2026-11-05T06:34:37Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107787"
    },
    {
      "type": "WEB",
      "url": "https://wpscan.com/vulnerability/cc0fd80d-3fd0-489c-985f-33fcca429486"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}
View JSON API Download JSON