wickedplugins

Top products

The 15 most recently published vulnerabilities affecting wickedplugins.

• CVE-2026-1883Wicked Folders <= 4.1.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Folder Deletion4.3Mar 15, 2026
• CVE-2023-0729Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order5.4Jun 9, 2023
• CVE-2023-0726Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder5.4Feb 8, 2023
• CVE-2023-0722Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state5.4Feb 8, 2023
• CVE-2023-0684Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders5.4Feb 8, 2023
• CVE-2023-0715Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder5.4Feb 8, 2023
• CVE-2023-0711Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state5.4Feb 8, 2023
• CVE-2023-0717Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder5.4Feb 8, 2023
• CVE-2023-0725Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder5.4Feb 8, 2023
• CVE-2023-0724Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder5.4Feb 8, 2023
• CVE-2023-0685Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders5.4Feb 8, 2023
• CVE-2023-0720Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order5.4Feb 8, 2023
• CVE-2023-0716Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder5.4Feb 8, 2023
• CVE-2023-0718Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder5.4Feb 7, 2023
• CVE-2023-0723Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object5.4Feb 7, 2023