Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in WP RSS Images 1.1

  • Severity: medium-risk
  • Status: Open
  • Publication: July 4, 2023

The WP RSS Images plugin for WordPress is vulnerable to unauthorised actions from unauthenticated attackers. This is because versions of the plugin up to and including 1.1 do not have adequate security measures in place to protect against Cross-Site Request Forgery. This means that attackers can create a forged link that, if clicked by a site administrator, could cause them to perform an action without their knowledge.

Detected in:

WP RSS Images open vulnerable versions: >= * <= 1.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.