Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in BP Group Documents 1.2.1

  • Severity: high-risk
  • Status: Fixed
  • Publication: October 4, 2013

The BP Group Documents plugin for WordPress has a security vulnerability that can be exploited by unauthenticated attackers. This vulnerability allows attackers to change the name and description of any group document. Additionally, the fields can be used to execute Cross-Site Scripting (XSS) attacks if a site administrator is tricked into clicking on a malicious link. The security vulnerability affects all versions of the plugin up to and including version 1.2.1 and is due to incorrect or missing nonce validation.

Detected in:

BP Group Documents fixed vulnerable versions: >= * <= 1.2.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.