Now officially on WordPress.org

CVE Database / CVE-2025-66120

CVE · Medium

CVE-2025-66120 — CatFolders – WordPress Media Library Folders & Categories [catfolders] < 2.5.4

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-66120 CatFolders – WordPress Media Library Folders & Categories [catfolders] < 2.5.4 Missing Authorization Medium 5.3 < 2.5.4 2.5.4 2025-11-30 —

CVE-2025-66120

A security flaw exists within the CatFolders plugin for WordPress, where insufficient permission checks allow malicious individuals to bypass authentication requirements and execute unauthorized operations. The vulnerability affects plugin versions up to and including 2.5.3.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings