Organizers Embed – Action Network for WordPress

Organizers Embed – Action Network for WordPress has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of October 2026. Their average CVSS score is 6.5, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include SQL Injection.

Every one of the 3 issues recorded for Organizers Embed – Action Network for WordPress has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Organizers Embed – Action Network for WordPress is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
6.5/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Organizers Embed – Action Network for WordPress vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2024-2954

WordPress Action Network 1.4.3 -Authentcated (Admin+) SQL Injection

Read the full analysis

Vulnerability Records

3 records
Organizers Embed – Action Network for WordPress banner
Latestv1.9.0

Organizers Embed – Action Network for WordPress

Concerted Action

Author

Concerted Action

5.0(2)
100/100
Last Updated
2026-10-09 (20d ago)
Active Installs
400+
Downloads
16,210
Requires WP
4.6+
Requires PHP
0+
Tested up to
WP 7.1.3
Created
2017-06-29 (10y ago)

Organizers Embed is a free WordPress plugin for the Action Network online organizing tools, maintained by Concerted Action. Features: Create a WordPress shortcode or widget from any Action Network embed code. Manage your saved embed codes using the WordPress backend. Supports sorting by title, type and last modified date, and provides a search function. Modify Action Network’s default “thank you for your support” and “help us by using sharing tools” messages, and control which sharing options (social, email & embed codes) are displayed, using shortcode options or widget controls. Use [actionnetwork_list] shortcode or the Organizers Embed List widget to show a list of current actions. Use [actionnetwork_calendar] shortcode or the Organizers Embed Calendar widget to show a list of upcoming events. Optionally outputs upcoming events in JSON. If you are an Action Network Partner, use your API key to sync all of your actions from Action Network to WordPress. Create signup widgets which allow visitors to your site to sign up for your email list without using Action Network javascript embeds. This allows you to place a signup form on every page (for example in the sidebar), and still load Action Network embed codes for actions on particular pages (since Action Network’s scripts will only load one embed code per page). This feature does require the API key, so you have to be an Action Network Partner to use it. Detailed specs for shortcode attributes, widget options, etc. are available on the Help menu for the Organizers Embed page on the backend.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C