Still has vulnerabilities, per Wordfence…
-
- Plugin Name: WP Blog and Widgets
- Current Plugin Version: 2.6
- Details: To protect your site from this vulnerability, the safest option is to deactivate and completely remove “WP Blog and Widgets” until a patched version is available. Get more information.(opens in new tab)
- Repository URL: https://wordpress.org/plugins/wp-blog-and-widgets(opens in new tab)
- Vulnerability Information: https://www.wordfence.com/threat-intel/vulnerabilities/id/2931fda2-edc8-44ea-9fff-ae9d94aa01bf?source=plugin(opens in new tab)
- Vulnerability Severity: 5.3/10.0 (Medium)
- Description
- Multiple WPOnlineSupport plugins for WordPress are vulnerable to unauthorized modification of data due to a missing capability check on the wpos_anylc_admin_init_process() function hooked via admin_init in various versions. This makes it possible for unauthenticated attackers to dismiss a license notice.
Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
The topic ‘Still has vulnerabilities, per Wordfence…’ is closed to new replies.
