https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-0729.htmlhttps://patchthecve.com/cve/CVE-2023-0729.htmlWed, 17 Jun 2026 05:26:11 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_sort_order function. This makes it possible for unauthenticated attackers to invoke this function via fhttps://patchthecve.com/cve/CVE-2023-0726.htmlhttps://patchthecve.com/cve/CVE-2023-0726.htmlWed, 17 Jun 2026 05:26:10 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_edit_folder function. This makes it possible for unauthenticated attackers to invoke this function via forgehttps://patchthecve.com/cve/CVE-2023-0725.htmlhttps://patchthecve.com/cve/CVE-2023-0725.htmlWed, 17 Jun 2026 05:26:10 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_clone_folder function. This makes it possible for unauthenticated attackers to invoke this function via forghttps://patchthecve.com/cve/CVE-2023-0724.htmlhttps://patchthecve.com/cve/CVE-2023-0724.htmlWed, 17 Jun 2026 05:26:10 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_add_folder function. This makes it possible for unauthenticated attackers to invoke this function via forgedhttps://patchthecve.com/cve/CVE-2023-0722.htmlhttps://patchthecve.com/cve/CVE-2023-0722.htmlWed, 17 Jun 2026 05:26:10 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_state function. This makes it possible for unauthenticated attackers to invoke this function via forgedhttps://patchthecve.com/cve/CVE-2023-0720.htmlhttps://patchthecve.com/cve/CVE-2023-0720.htmlWed, 17 Jun 2026 05:26:09 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_folder_order function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invokehttps://patchthecve.com/cve/CVE-2023-0717.htmlhttps://patchthecve.com/cve/CVE-2023-0717.htmlWed, 17 Jun 2026 05:26:09 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_delete_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke thihttps://patchthecve.com/cve/CVE-2023-0716.htmlhttps://patchthecve.com/cve/CVE-2023-0716.htmlWed, 17 Jun 2026 05:26:09 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_edit_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this https://patchthecve.com/cve/CVE-2023-0715.htmlhttps://patchthecve.com/cve/CVE-2023-0715.htmlWed, 17 Jun 2026 05:26:09 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_clone_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke thishttps://patchthecve.com/cve/CVE-2023-0711.htmlhttps://patchthecve.com/cve/CVE-2023-0711.htmlWed, 17 Jun 2026 05:26:08 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_state function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this fhttps://patchthecve.com/cve/CVE-2023-0685.htmlhttps://patchthecve.com/cve/CVE-2023-0685.htmlWed, 17 Jun 2026 05:26:05 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_unassign_folders function. This makes it possible for unauthenticated attackers to invoke this function via https://patchthecve.com/cve/CVE-2023-0684.htmlhttps://patchthecve.com/cve/CVE-2023-0684.htmlWed, 17 Jun 2026 05:26:05 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_unassign_folders function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke https://patchthecve.com/cve/CVE-2023-0718.htmlhttps://patchthecve.com/cve/CVE-2023-0718.htmlWed, 17 Jun 2026 05:26:09 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this https://patchthecve.com/cve/CVE-2023-0730.htmlhttps://patchthecve.com/cve/CVE-2023-0730.htmlWed, 17 Jun 2026 05:26:11 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_folder_order function. This makes it possible for unauthenticated attackers to invoke this function viahttps://patchthecve.com/cve/CVE-2023-0727.htmlhttps://patchthecve.com/cve/CVE-2023-0727.htmlWed, 17 Jun 2026 05:26:10 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_delete_folder function. This makes it possible for unauthenticated attackers to invoke this function via forhttps://patchthecve.com/cve/CVE-2023-0723.htmlhttps://patchthecve.com/cve/CVE-2023-0723.htmlWed, 17 Jun 2026 05:26:10 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_move_object function. This makes it possible for unauthenticated attackers to invoke this function via forgehttps://patchthecve.com/cve/CVE-2023-0719.htmlhttps://patchthecve.com/cve/CVE-2023-0719.htmlWed, 17 Jun 2026 05:26:09 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_save_sort_order function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke thttps://patchthecve.com/cve/CVE-2023-0712.htmlhttps://patchthecve.com/cve/CVE-2023-0712.htmlWed, 17 Jun 2026 05:26:08 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_move_object function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this https://patchthecve.com/cve/CVE-2023-0728.htmlhttps://patchthecve.com/cve/CVE-2023-0728.htmlWed, 17 Jun 2026 05:26:10 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajax_save_folder function. This makes it possible for unauthenticated attackers to invoke this function via forgehttps://patchthecve.com/cve/CVE-2023-0713.htmlhttps://patchthecve.com/cve/CVE-2023-0713.htmlWed, 17 Jun 2026 05:26:08 +0000MEDIUM 5.4: The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_add_folder function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to invoke this f