https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-07T11:33:05.949132+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-107787 CVE-2026-107787 — CatFolders < 2.5.7 - Subscriber+ Folder Ownership Reset and User Restriction Disable via catf_run_merge 2026-11-07T11:33:05.950411+00:00

Affected: Unknown CatFolders

The CatFolders WordPress plugin before 2.5.7 does not have authorisation checks on a folder maintenance action, allowing users with a role as low as subscriber to reset the per-user ownership of every media folder and disable the CatFolders WordPress plugin before 2.5.7's user restriction setting.