10 matches found
CVE-2025-13417
The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks...
WordPress Plugin Organizer plugin < 10.2.4 - Subscriber+ SQLi vulnerability
Subscriber+ SQLi vulnerability discovered by Alex Tselevich nos3curity in WordPress Plugin Plugin Organizer versions 10.2.4...
CVE-2025-13417
The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks...
CVE-2025-13417 Plugin Organizer < 10.2.4 - Subscriber+ SQLi
The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks...
CVE-2025-13417 Plugin Organizer < 10.2.4 - Subscriber+ SQLi
The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks...
CVE-2025-13417
CVE-2025-13417 affects Plugin Organizer for WordPress (pre-10.2.4). The description and connected reports confirm a SQL injection flaw caused by not sanitizing/escaping a parameter before its use in a SQL statement, enabling subscribers to exploit it. Affected product/version: Plugin Organizer
EUVD-2025-205555
The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks...
PT-2025-53696
Name of the Vulnerable Software and Affected Versions Plugin Organizer versions prior to 10.2.4 Description The Plugin Organizer WordPress plugin does not properly sanitize and escape a parameter before using it in a SQL statement. This allows subscribers to potentially execute SQL injection...
WordPress plugin Plugin Organizer 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
CVE-2012-6512
The Organizer plugin 1.2.1 for WordPress allows remote attackers to obtain the installation path via unspecified vectors to 1 pluginhook.php, 2 page/index.php, 3 page/dir.php 4 page/options.php, 5 page/resize.php, 6 page/upload.php, 7 page/users.php, or 8 page/view.php...