Media Library Folders WordPress Plugin Missing Authorization Vulnerability in Settings Change

A vulnerability exists in the Media Library Folders plugin for WordPress, all versions through 8.3.0, allowing unauthorized changes to plugin settings. This issue arises from a lack of proper capability checks on several AJAX actions, enabling authenticated attackers with Author-level access or higher to modify settings, including those related to IP blocking.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in plugin settings, potentially allowing for misuse of IP-blocking features.

Remediation

Users are advised to update the Media Library Folders plugin to version 8.3.1 or a newer patched version.