CVE-2025-52786

UNKNOWN 0.0

WordPress Media Folder plugin <= 1.0.0 - Cross Site Scripting (XSS) Vulnerability

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kingdom Creation Media Folder media-folder allows Reflected XSS.This issue affects Media Folder: from n/a through <= 1.0.0.

CWE	CWE-79
Vendor	kingdom creation
Product	media folder
Published	Jul 16, 2025
Last Updated	Apr 1, 2026

Stay Ahead of the Next One

Get instant alerts for kingdom creation media folder

Be the first to know when new unknown vulnerabilities affecting kingdom creation media folder are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Kingdom Creation / Media Folder

0 ≤ 1.0.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

patchstack.com: https://patchstack.com/database/Wordpress/Plugin/media-folder/vulnerability/wordpress-media-folder-1-0-0-cross-site-scripting-xss-vulnerability?_s_id=cve

Credits

Nguyen Xuan Chien | Patchstack Bug Bounty Program