Lucene search
DmitriiWPEX-ID:D59E6EAC-3EBF-40E0-800C-8CBEF345423FHistoryAug 30, 2023 - 12:00 a.m.
FileOrganizer < 1.0.3 - Admin+ Arbitrary File Access
2023-08-3000:00:00
Dmitrii
30
fileorganizer
arbitrary file access
multisite instance
admin
exploit
0.001 Low
EPSS
Percentile
19.3%
Description The plugin does not restrict functionality on multisite instances, allowing site admins to gain full control over the server.
On a multisite instance, log in as an admin. Click on File Organizer in the sidebar. The UI gives full control to the files on the server, despite not being a super admin.Related
cvelist
cvelist
CVE-2023-3664 FileOrganizer <= 1.0.2 - Admin+ Arbitrary File Access
2023-09-25 15:56:55
cve
cve
CVE-2023-3664
2023-09-25 16:15:14
openvas
openvas
WordPress FileOrganizer Plugin < 1.0.3 Improper Access Control Vulnerability
2023-09-26 00:00:00
prion
prion
Code injection
2023-09-25 16:15:00
wpvulndb
wpvulndb
FileOrganizer < 1.0.3 - Admin+ Arbitrary File Access
2023-08-30 00:00:00
nvd
nvd
CVE-2023-3664
2023-09-25 16:15:14
wordfence
wordfence