Scripts Organizer < 3.0 - Unauthenticated Arbitrary File Upload
criticalThe Scripts Organizer plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, but not including, 3.0. This is due to missing capability checks in one of its AJAX actions that is accessible to unauthenticated users. This makes it possible for unauthenticated attackers to upload arbitrary files on...
- CVSS:
- 9.8
- Affected:
- up to 3.0
- Fixed in:
- 3.0
- Disclosed:
- Sep 5, 2022