Skip to content

Product

dplugins scripts organizer vulnerabilities

1 published CVE affecting dplugins scripts organizer, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest dplugins scripts organizer CVEs

Newest publication first

  1. CVE-2021-24890 Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload

    Published
    HighCVSS 8.8

    The Scripts Organizer WordPress plugin before 3.0 does not have capability and CSRF checks in the saveScript AJAX action, available to both unauthenticated and authenticated users, and does not validate user input in any way, which could allow unauthenticated users to put arbitra...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.