CVE-2023-3664

—

CVSS 3.1

7.2 high

EPSS

<1%p54

Published

Sep 25, 2023 (Sep 25, 2023)

Modified

Jun 17, 2026

Description

The FileOrganizer WordPress plugin through 1.0.2 does not restrict functionality on multisite instances, allowing site admins to gain full control over the server.

Vendors: fileorganizer
Products: fileorganizer
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.