codedraft vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.5	EPSS 0.2%	CVE-2025-28949Mediabay (WordPress plugin) · SQL Injection High8.5EPSS 0.2%2025-12-31CVE Database V5CVE-2025-28949 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codedraft Mediabay - WordPress Media Library Folders allows Blind SQL Injection.This issue affects Mediabay - WordPress Media Library Folders: from n/a through 1.4. EPSS 0.2%Vulnerability Codedraft CWE-89	CVE Database V5	2025-12-31
High	7.1	EPSS 0.1%	CVE-2025-28948Mediabay (WordPress plugin) · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.1%2025-06-06CVE Database V5CVE-2025-28948 Cross-Site Request Forgery (CSRF) vulnerability in codedraft Mediabay - WordPress Media Library Folders allows Reflected XSS. This issue affects Mediabay - WordPress Media Library Folders: from n/a through 1.4. EPSS 0.1%Vulnerability codedraft CWE-352	CVE Database V5	2025-06-06

Page 1 of 1