Really Simple Security logo

Log out
Get PRO

Latest

Output validation vulnerability in Captivate Sync 3.0.3

  • Severity: high-risk
  • Status: Fixed
  • Publication: May 5, 2025

The plugin called Captivate Sync for WordPress has a security issue in versions up to 3.0.3. This means that hackers who are not logged in can insert a type of code called a PHP Object. There is not currently a way for this code to do harm on its own, but if the website has other plugins or themes installed, the hacker could use them to delete files, get private information, or run their own code.

Detected in:

Captivate Sync fixed vulnerable versions: >= * <= 3.0.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.