Vulnerability · Published Sep 25, 2023 · Assigned by WPScan
CVE-2023-3664FileOrganizer <= 1.0.2 - Admin+ Arbitrary File Access
High 7.2
In plain English
A high-severity security flaw in FileOrganizer from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).
Severity (CVSS 3.1)7.2High
Exploit odds (30 days)0.8%top 43.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
The FileOrganizer WordPress plugin through 1.0.2 does not restrict functionality on multisite instances, allowing site admins to gain full control over the server.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | FileOrganizer | 0 – through 1.0.2 |
References
- https://wpscan.com/vulnerability/d59e6eac-3ebf-40e0-800c-8cbef345423f exploit, vdb-entry, technical-description