Log in Scan Now

All security reports

NVD security advisoryHigh

High advisory for Contributor PHP Object Injection in WP M

CVE-2026-118075 · Reported 29 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

Contributor PHP Object Injection in WP MPHP ecosystem

Advisory overview

Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions.

Related references

https://patchstack.com/database/wordpress/plugin/wp-media-folders/vulnerability/wordpress-wp-media-folders-plugin-1-1-10-php-object-injection-vulnerability?_s_id=cve

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account

Contributor PHP Object Injection in WP Media folders <= 1.1.10 versions. | Security report | Cevnitra