More information about this CVE will likely be available in a few days

Description

The Plugin Organizer WordPress plugin before 10.2.4 does not sanitize and escape a parameter before using it in a SQL statement, allowing subscribers to perform SQL injection attacks.

Related CPE's

Could not find any relations

References

https://wpscan.com/vulnerability/862fdf28-5195-443d-8ef2-e4043d0fdc92/

Weaknesses

Could not find any weaknesses

CVSS impact metrics

Could not find any metrics

Information

Source identifier

[email protected]

Vulnerability status

Received

Published

2025-12-29T06:15:50.580

2 hours ago

Last modified

2025-12-29T06:15:50.580

2 hours ago