Plugin icon

FileOrganizer – WordPress File Manager

fileorganizer

Vulnerabilities:

7

Last Updated:

June 10, 2026

Active Installs:

200000

Published
Title
Fixed in
CVSS
Published
2026-06-15
Title
Multiple elFinder Plugins - Authenticated OS Command Injection
Fixed in
Fixed in 1.1.9
CVSS
9.1 (critical)
Published
2026-06-15
Title
FileOrganizer < 1.2.0 - Authenticated Arbitrary File Upload via elFinder File Operations
Fixed in
Fixed in 1.2.0
CVSS
8.5 (high)
Published
2024-12-06
Title
FileOrganizer < 1.1.5 - Authenticated (Administrator+) Local JavaScript File Inclusion
Fixed in
Fixed in 1.1.5
CVSS
7.2 (high)
Published
2024-10-29
Title
FileOrganizer < 1.1.0 - Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 1.1.0
CVSS
7.5 (high)
Published
2024-06-06
Title
FileOrganizer < 1.0.8 - Sensitive Information Exposure via Directory Listing
Fixed in
Fixed in 1.0.8
CVSS
7.5 (high)
Published
2024-04-23
Title
FileOrganizer and FileOrganizer Pro < 1.0.7 - Authenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.0.7
CVSS
4.4 (medium)
Published
2023-09-03
Title
FileOrganizer < 1.0.3 - Admin+ Arbitrary File Access
Fixed in
Fixed in 1.0.3
CVSS
6.6 (medium)