The Organizer plugin for WordPress is prone to the following security vulnerabilities:
1. A cross-site scripting vulnerability.
2. An information-disclosure vulnerability.
3. A directory-traversal vulnerability.
Attackers may leverage these issues to steal cookie-based authentication credentials, execute arbitrary script code in the browser, or disclose sensitive information; other attacks are also possible.
Organizer 1.2.1 is vulnerable; other versions may also be affected.
Cross-site scripting vulnerability: