FileOrganizer – WordPress File Manager vulnerabilities

3 known vulnerabilities in FileOrganizer – WordPress File Manager from Softaculous. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  FileOrganizer – WordPress File Manager: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-11010Dec 7, 2024Softaculous

  The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.1.4 via the 'default_lang' parameter. This makes it possible for authenticated attackers, with

• 8.8 High severity

  FileOrganizer – WordPress File Manager: Unrestricted Upload of File with Dangerous Type

  CVE-2024-7985Oct 29, 2024SoftaculousEPSS 2.35%

  The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the "fileorganizer_ajax_handler" function in all versions up to, and including, 1.0.9. This makes it poss

• 7.5 High severity

  FileOrganizer – WordPress File Manager: Insecure Storage of Sensitive Information

  CVE-2024-5599Jun 7, 2024Softaculous

  The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.7 via the 'fileorganizer_ajax_handler' function. This makes it possible for unauthenticated at