WordPress Plugin Vulnerabilities
Give WP < 2.5.10 - Multiple Issues
Description
- Unauthenticated Plugin's Settings Change.
- Authenticated Plugin's Settings Change.
- Improper validation of untrusted data in Headers used to retrieve the user's IP address.
Affects Plugins
Fixed in 2.5.10 References
Miscellaneous
Original Researcher
Jerome Bruandet
Verified
No
WPVDB ID
Timeline
Publicly Published
2019-10-30 (about 6 years ago)
Added
2019-10-30 (about 6 years ago)
Last Updated
2020-09-01 (about 5 years ago)
WPScan 