CVE-2026-118075HIGH NVDCVSS Score 8.8Severity HIGHPublished Oct 29, 2026Vendor unknownDescriptionContributor PHP Object Injection in WP Media folders <= 1.1.10 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/wp-media-folders/vulnerability/wordpress-wp-media-folders-plugin-1-1-10-php-object-injection-vulnerability?_s_id=cve