Noo Organici Library Vulnerabilities

The Organici Library plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.1.2 via deserialization of untrusted input [from the vulnerable parameter?|in the vulnerable function?]. This makes it possible for authenticated attackers, with subscriber-level access and above, to inje...

CVSS:

7.5

Affected:

up to 2.1.2

Fixed in:

2.1.3

Disclosed:

Mar 16, 2026

CVE-2026-24976 on NVD →

The Organici Library plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 2.1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with subscriber-level access and...

CVSS:

6.5

Affected:

up to 2.1.2

Fixed in:

2.1.3

Disclosed:

Mar 16, 2026

CVE-2026-24977 on NVD →

The Organici Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfull...

CVSS:

6.1

Affected:

up to 2.1.2

Fixed in:

2.1.3

Disclosed:

Mar 16, 2026

CVE-2026-24975 on NVD →