TI-2025-13251 CVE-2025-14508 · GHSA-jfwj-h3pg-849c
Missing authorization in yalogica MediaCommander – Bring Folders to Media, Posts, and…
Priority LOW 28
The MediaCommander – Bring Folders to Media, Posts, and Pages plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the import-csv REST API endpoint in all versions up to,…