WordPress Plugin Vulnerabilities

WPtouch 3.x - Insecure Nonce Generation

Description

The WPtouch WordPress plugin was affected by an Insecure Nonce Generation security vulnerability.

Affects Plugins

Plugin icon
wptouch
Fixed in 3.4.3

References

URL
https://blog.sucuri.net/2014/07/disclosure-insecure-nonce-generation-in-wptouch.html

Miscellaneous

Verified
Yes
WPVDB ID
8e5eefdc-f404-45a1-9ddc-46b29e75c55d

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-02-14
Title
Auto Featured Image < 3.9.16 - Author+ Arbitrary File Upload
Published
2022-02-14
Title
WordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Malicious SVG
Published
2014-08-01
Title
EditorMonkey - (FCKeditor) Arbitrary File Upload
Published
2025-08-27
Title
WP ULike Pro < 1.9.4 - Unauthenticated Limited Arbitrary File Upload
Published
2015-04-04
Title
Work The Flow File Upload <= 2.5.2 - Shell Upload