Media Folder Manager Security & Risk Analysis

wordpress.org/plugins/media-folder-manager

Organize media files into virtual folders with a modern, folder-based media manager for WordPress Media Library.

0 active installs v1.0.3 PHP 7.4+ WP 5.8+ Updated Mar 25, 2026
file-managerfoldersmediamedia-libraryorganization
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Media Folder Manager Safe to Use in 2026?

Generally Safe

Score 100/100

Media Folder Manager has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "media-folder-manager" v1.0.3 plugin exhibits a generally strong security posture based on the provided static analysis. All identified AJAX entry points include nonce checks, and a significant number of capability checks are in place, demonstrating good development practices for protecting administrative functions. Furthermore, the plugin exclusively uses prepared statements for all SQL queries and properly escapes all output, mitigating common injection and XSS vulnerabilities. The absence of any known CVEs and the lack of critical or high-severity taint flows further contribute to a positive security assessment.

Vulnerabilities
None known

Media Folder Manager Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Media Folder Manager Release Timeline

v1.0.3Current
v1.0.2
v1.0.0
Code Analysis
Analyzed Apr 16, 2026

Media Folder Manager Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
25 prepared
Unescaped Output
0
60 escaped
Nonce Checks
13
Capability Checks
20
File Operations
3
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared25 total queries

Output Escaping

100% escaped60 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

4 flows
<admin-hooks> (includes/admin-hooks.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Media Folder Manager Attack Surface

Entry Points13
Unprotected0

AJAX Handlers 13

authwp_ajax_mfoldman_create_folderincludes/ajax.php:42
authwp_ajax_mfoldman_update_folderincludes/ajax.php:43
authwp_ajax_mfoldman_delete_folderincludes/ajax.php:44
authwp_ajax_mfoldman_get_foldersincludes/ajax.php:45
authwp_ajax_mfoldman_assign_mediaincludes/ajax.php:48
authwp_ajax_mfoldman_bulk_assign_mediaincludes/ajax.php:49
authwp_ajax_mfoldman_get_media_in_folderincludes/ajax.php:50
authwp_ajax_mfoldman_reset_foldersincludes/ajax.php:53
authwp_ajax_mfoldman_get_default_folderincludes/ajax.php:54
authwp_ajax_mfoldman_save_default_folderincludes/ajax.php:55
authwp_ajax_mfoldman_update_folder_colorincludes/ajax.php:58
authwp_ajax_mfoldman_download_folderincludes/ajax.php:61
authwp_ajax_mfoldman_bulk_delete_foldersincludes/ajax.php:64
WordPress Hooks 10
actionpre_get_postsincludes/admin-hooks.php:42
actionattachment_fields_to_editincludes/admin-hooks.php:45
actionattachment_fields_to_saveincludes/admin-hooks.php:46
filtermanage_media_columnsincludes/admin-hooks.php:49
actionmanage_media_custom_columnincludes/admin-hooks.php:50
actionadmin_menuincludes/admin-hooks.php:55
actionadmin_initincludes/admin-hooks.php:56
actionadmin_initincludes/db-schema.php:42
actionadd_attachmentincludes/media-assign.php:42
actionadmin_enqueue_scriptsmedia-folder-manager.php:74
Maintenance & Trust

Media Folder Manager Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 25, 2026
PHP min version7.4
Downloads246

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Media Folder Manager Developer Profile

lytechxdigital

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Media Folder Manager

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/media-folder-manager/assets/css/admin.css/wp-content/plugins/media-folder-manager/assets/js/admin.js
Script Paths
/wp-content/plugins/media-folder-manager/assets/js/admin.js
Version Parameters
media-folder-manager/assets/css/admin.css?ver=media-folder-manager/assets/js/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
mfoldman-folder-listmfoldman-folder-itemmfoldman-folder-namemfoldman-add-folder-buttonmfoldman-upload-containermfoldman-settings-section
Data Attributes
data-mfoldman-folder-iddata-mfoldman-action
JS Globals
mfoldmanData
REST Endpoints
/wp-json/mfoldman/v1/
FAQ

Frequently Asked Questions about Media Folder Manager