high7.5
CVE-2026-9690
Unauthenticated Arbitrary File Download in WP Media folder Addon <= 4.0.1 versions.
Impact
Unauthenticated Arbitrary File Download in WP Media folder Addon <= 4.0.1 versions.
Affected products
| Product | Affected versions |
|---|---|
| WP Media Folder Addon | through 4.0.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.