Skip to content
OpenAdvisories

Vendor

foomagoo

1 known vulnerabilities.

Products

Plugin Organizer 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-15304

    Plugin Organizer <= 10.2.4 - Authenticated (Subscriber+) SQL Injection

    The Plugin Organizer plugin for WordPress is vulnerable to SQL Injection via the 'PO_plugin_path' parameter in versions up to, and including, 10.2.4. This is due to insufficient escaping on the user-supplied parameter in the perform_plugin_search() function, …

    foomagoo Plugin Organizer Web / CMS