WordPress plugin
Plugin Organizer security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All Plugin Organizer vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Authenticated (Subscriber+) SQL Injection ≤10.2.4Update to 10.2.5 | CVE-2026-15304 | |
| Medium6.5 | Authenticated (Subscriber+) SQL Injection ≤10.2.3Update to 10.2.4 | CVE-2025-13417 |
- Medium6.5Authenticated (Subscriber+) SQL Injection
≤10.2.4Update to 10.2.5
- Medium6.5Authenticated (Subscriber+) SQL Injection
≤10.2.3Update to 10.2.4
Plugin Organizer: common questions
Does Plugin Organizer have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Plugin Organizer: 2 medium. None are known to affect version null.
How do I check which version of Plugin Organizer I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Plugin Organizer vulnerability?
CVE-2026-15304, published Jul 27, 2026: Plugin Organizer <= 10.2.4 - Authenticated (Subscriber+) SQL Injection. Severity: Medium (CVSS 6.5).
Is any Plugin Organizer vulnerability listed in CISA KEV?
No. None of the known Plugin Organizer vulnerabilities is currently listed in the CISA KEV catalog.