Vendors / codedraft Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now codedraft records in CISA KEV No codedraft vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codedraft Mediabay - WordPress Media Library Folders allows Blind SQL Injection.This issue affects Mediabay - WordPres…
CVSS 3.1 HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00243 · Published 2025-12-31 · No fix listed CWE-89
Priority LOW 30
Cross-Site Request Forgery (CSRF) vulnerability in codedraft Mediabay - WordPress Media Library Folders allows Reflected XSS.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.0015 · Published 2025-06-06 · No fix listed CWE-352
Priority LOW 26
Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Codedrafty Mediabay – Media Library Folders plugin <= 1.6 versions.
CVSS 3.1 MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00363 · Published 2023-10-16 · No fix listed CWE-79
Priority LOW 20
Missing Authorization vulnerability in codedraft Mediabay mediabay-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mediabay: from n/a through <= 1.6.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00378 · Published 2025-01-02 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
0 2 2 0 0
THREATIST.IORead the docs