CyberRota Analysis
AI-GeneratedThe Media Library Organizer plugin for WordPress versions prior to 2.1.4 is vulnerable as it fails to verify user permissions when creating new terms in taxonomies, allowing users with contributor-level access and higher to create publicly visible terms. This could lead to unauthorized content being displayed on the site, potentially impacting its integrity and user trust. WordPress site administrators, especially those using this plugin, should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Media Library Organizer WordPress plugin before 2.1.4 does not verify that the requesting user holds the target taxonomy's management capability before creating a new term, allowing users with contributor-level access and above to create publicly visible terms in any taxonomy registered on the site.