TI-2025-11037 CVE-2025-12038 · GHSA-25vq-xhx7-64q5
Folderly <= 0.3 - Incorrect Authorization to Authenticated (Author+) Term Deletion
Priority LOW 19
The Folderly plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check on the /wp-json/folderly/v1/config/clear-all-data REST API endpoint in all versions up to, and…