PT-2025-53696

CVE-2025-13417

·

Published

2025-12-08

·

Updated

2026-10-07

Description by

CVSS 3.1
8.6
High
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Plugin Organizer versions prior to 10.2.4
Description The Plugin Organizer WordPress plugin does not properly sanitize and escape a parameter before using it in a SQL statement. This allows subscribers to potentially execute SQL injection attacks.
Recommendations Update Plugin Organizer to version 10.2.4 or later.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2025-13417
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com