Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in WP Pocket URLs 1.0.2

  • Severity: medium-risk
  • Status: Open
  • Publication: November 29, 2023

The WP Pocket URLs plugin for WordPress is vulnerable to a security issue called Reflected Cross-Site Scripting. This means that versions of the plugin up to, and including, 1.0.2 are not protecting users from having malicious web scripts injected into pages they view. The malicious scripts can be injected if an attacker can successfully get a user to perform an action, such as clicking on a link. This could allow the attacker to gain access to personal information.

Detected in:

WP Pocket URLs open vulnerable versions: >= * <= 1.0.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.