CVE-2026-94297 — Media Library Organizer 2.0.4 - 2.1.3 - Contributor+ Arbitrary Taxonomy Term Creation
The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term,…
Published: 2026-09-30 · CVSS: 2.7 · CVSS 3.1
The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, allowing users with contributor-level access and above to create publicly visible terms in any taxonomy registered on the site.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7