Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/12/30 6:3 a.m.4 views

CVE-2025-13417

The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks...

8.6CVSS7.9AI score0.00033EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/29 12:46 p.m.4 views

WordPress Plugin Organizer plugin < 10.2.4 - Subscriber+ SQLi vulnerability

Subscriber+ SQLi vulnerability discovered by Alex Tselevich nos3curity in WordPress Plugin Plugin Organizer versions 10.2.4...

8.6CVSS6.7AI score0.00033EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/12/29 6:15 a.m.2 views

CVE-2025-13417

The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks...

8.6CVSS0.00033EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/29 6:0 a.m.2 views

CVE-2025-13417 Plugin Organizer < 10.2.4 - Subscriber+ SQLi

The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks...

7.5AI score0.00033EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/29 6:0 a.m.26 views

CVE-2025-13417 Plugin Organizer < 10.2.4 - Subscriber+ SQLi

The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks...

0.00033EPSS
Exploits0References1
CVE
CVE
added 2025/12/29 6:0 a.m.12 views

CVE-2025-13417

CVE-2025-13417 affects Plugin Organizer for WordPress (pre-10.2.4). The description and connected reports confirm a SQL injection flaw caused by not sanitizing/escaping a parameter before its use in a SQL statement, enabling subscribers to exploit it. Affected product/version: Plugin Organizer

8.6CVSS7.5AI score0.00033EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/29 6:0 a.m.2 views

EUVD-2025-205555

The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks...

8.6CVSS7.3AI score0.00033EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.3 views

PT-2025-53696

Name of the Vulnerable Software and Affected Versions Plugin Organizer versions prior to 10.2.4 Description The Plugin Organizer WordPress plugin does not properly sanitize and escape a parameter before using it in a SQL statement. This allows subscribers to potentially execute SQL injection...

8.6CVSS7.7AI score0.00033EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.2 views

WordPress plugin Plugin Organizer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.6CVSS5.8AI score0.00033EPSS
Exploits0References2
Cvelist
Cvelist
added 2013/01/24 1:0 a.m.20 views

CVE-2012-6512

The Organizer plugin 1.2.1 for WordPress allows remote attackers to obtain the installation path via unspecified vectors to 1 pluginhook.php, 2 page/index.php, 3 page/dir.php 4 page/options.php, 5 page/resize.php, 6 page/upload.php, 7 page/users.php, or 8 page/view.php...

6.7AI score0.00852EPSS
Exploits1References3
Rows per page
Query Builder