Media Library Folders Security & Risk Analysis

The "media-library-plus" v8.3.7 plugin exhibits a mixed security posture. While it demonstrates good practices in its handling of SQL queries, with 97% using prepared statements, and a significant number of nonce and capability checks, several areas raise concerns. The presence of two AJAX handlers without authentication checks represents a direct attack surface that could be exploited by unauthenticated users. The taint analysis, while not revealing critical or high-severity issues in this specific scan, showed 14 flows with unsanitized paths, suggesting a potential for path-related vulnerabilities if not carefully managed.

The plugin's vulnerability history is a significant red flag. With a total of 8 known CVEs, including one critical and one high-severity, and a recent vulnerability recorded in 2026, it indicates a pattern of security weaknesses. The common vulnerability types such as Missing Authorization, Cross-site Scripting, Path Traversal, SQL Injection, and CSRF further highlight recurring issues that attackers may target. The fact that there are currently no unpatched vulnerabilities is positive, but the historical trend suggests a need for vigilant monitoring and prompt updates.

In conclusion, while the plugin has strengths in its SQL handling and general security checks, the unauthenticated AJAX endpoints, unsanitized path flows, and a concerning history of diverse and severe vulnerabilities present notable risks. The plugin's overall security would be significantly improved by addressing the unauthenticated entry points and ensuring thorough sanitization of all path-related operations. Users should be cautious and ensure they are running the latest available version, which ideally would have addressed past vulnerabilities.