Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in Security & Malware scan by CleanTalk 2.50

  • Severity: high-risk
  • Status: Fixed
  • Publication: July 6, 2020

The WordPress Security Scanner plugin is vulnerable to misuse in versions up to 2.50. This is because some of the security checks on certain actions done with AJAX technology and the source page of the administration dashboard are missing. This makes it possible for authenticated attackers, who have at least the same access level as a subscriber, to call functions, delete, and upload files.

Detected in:

Login Security, FireWall, Malware removal by CleanTalk fixed vulnerable versions:
Login, Password Security, FireWall, Malware removal by CleanTalk fixed vulnerable versions:
Security & Malware scan by CleanTalk fixed vulnerable versions: >= * <= 2.50
Security, FireWall & Malware scan by CleanTalk fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.