Frenify Mediamatic — known CVE vulnerabilities

Every CVE whose affected-product data names Frenify Mediamatic, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-24848 — CVSS 8.8 (high): The mediamaticAjaxRenameCategory AJAX action of the Mediamatic WordPress plugin before 2.8.1, available to any authenticated user, does not…
• CVE-2023-0294 — CVSS 8.8 (high): The Mediamatic – Media Library Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including…
• CVE-2022-47144 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Plugincraft Mediamatic – Media Library Folders plugin <= 2.8.1 versions.
• CVE-2023-0293 — CVSS 4.3 (medium): The Mediamatic – Media Library Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on…