What’s Vulnerable › Vulnerabilities

CVE-2023-3664: FileOrganizer <= 1.0.2 - Admin+ Arbitrary File Access

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-09-25 · updated 2026-06-17

Description

The FileOrganizer WordPress plugin through 1.0.2 does not restrict functionality on multisite instances, allowing site admins to gain full control over the server.

Affected products

• FileOrganizer: through 1.0.2

References

• https://wpscan.com/vulnerability/d59e6eac-3ebf-40e0-800c-8cbef345423f
• https://wpscan.com/vulnerability/d59e6eac-3ebf-40e0-800c-8cbef345423f

Get alerted when CVE-2023-3664 or the next vulnerability affects your stack