Access violation vulnerability in FlyingPress 3.9.6

The FlyingPress plugin for WordPress is not secure in versions 3.9.6 and below. This means that people who have logged in and have a subscriber-level permission or higher can interact with the plugin in ways that the administrator did not intend. For example, they can configure an external CDN (Content Delivery Network) to include malicious javascript. This could be used to harm the website.

Detected in:

FlyingPress fixed vulnerable versions: >= * <= 3.9.6

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.