1.0.6

DATE	CVE	VULNERABILITY TITLE	RISK
2024-10-29	CVE-2024-7985	Unrestricted Upload of File with Dangerous Type vulnerability in Fileorganizer The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the "fileorganizer_ajax_handler" function in all versions up to, and including, 1.0.9. network low complexity fileorganizer CWE-434	8.8
2024-05-02	CVE-2024-2324	Cross-site Scripting vulnerability in Fileorganizer The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via svg file upload in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping. network low complexity fileorganizer CWE-79	5.4