The CatFolders Document Gallery & PDF Library WordPress plugin versions prior to 2.0.7 lack proper authorization checks on some REST API endpoints. This deficiency permits unauthenticated attackers to obtain sensitive information about media attachments assigned to any folder managed by the plugin. The exposed data includes the title, type, size, and URL of media files, even for folders not published in any gallery on the site. This vulnerability is classified as CWE-200 (Information Exposure) and has a CVSS v3.1 base score of 7.5, indicating high severity. No official remediation or patch information is currently available from the vendor, and no known exploits are reported in the wild.

An attacker can retrieve sensitive metadata about media attachments without authentication, potentially exposing confidential or private information stored in unpublished folders. This exposure could aid further attacks or information gathering but does not directly impact integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the affected REST API endpoints via web application firewall rules or other access control mechanisms to prevent unauthenticated access.