low2.7
CVE-2026-94297
The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before cre…
Impact
The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, allowing users with contributor-level access and above to create publicly visible terms in any taxonomy registered on the site.
Affected products
| Product | Affected versions |
|---|---|
| Media Library Organizer WordPress Plugin | before 2.1.4 |
Versions were read from the advisory text. No structured product data has been published for this record yet.