plugin

Simple Org Chart Vulnerabilities

2 known security issues reported for the Simple Org Chart WordPress plugin. Most recent disclosed Aug 17, 2023.

2 medium

Running Simple Org Chart on your site? Check whether your installed version is affected.

Scan your site free

Simple Org Chart <= 2.3.4 - Missing Authorization

medium

The Simple Org Chart plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the myajax() function in versions up to, and including, 2.3.4. This makes it possible for unauthenticated attackers to invoke the function and update the plugin's tree option.

CVSS:
5.3
Affected:
up to 2.3.4
Fixed in:
2.3.5
Disclosed:
Aug 17, 2023

CVE-2023-40603 on NVD →

Simple Org Chart <= 2.3.4 - Cross-Site Request Forgery

medium

The Simple Org Chart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.4. This is due to missing nonce validation on the org_chart_do_page() function. This makes it possible for unauthenticated attackers to modify the plugin's settings via a forged request granted th...

CVSS:
4.3
Affected:
up to 2.3.4
Fixed in:
2.3.5
Disclosed:
Aug 17, 2023

CVE-2023-28791 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database