The CDN Vote plugin for WordPress is not secure in versions up to 0.4.2. Attackers can use this vulnerability to access sensitive information from the database. They can do this by adding extra pieces of code to the parameters ‘cdnvote_post_id’ and ‘cdnvote_point’. These parameters are not fully protected
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
