Input validation vulnerability in CTT Expresso para WooCommerce 3.2.11

The CTT Expresso para WooCommerce plugin for WordPress had a vulnerability that allowed someone with administrator-level permissions to inject malicious web scripts into pages. This script would run every time someone visited the page. This vulnerability only affected WordPress websites that had multiple sites enabled and the “”unfiltered_html”” feature disabled. This vulnerability was fixed in version 1.4.

Detected in:

CTT Expresso para WooCommerce fixed vulnerable versions: >= * <= 3.2.11

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.