Input validation vulnerability in eRocket 1.2.4

The eRocket plugin for WordPress has a problem that allows someone with administrator-level access to do something bad. It is possible for them to put certain web scripts onto pages that will run when someone visits those pages. This only affects websites that have multiple websites and those where certain security settings have been turned off. This problem exists in all versions up to and including 1.2.4.

Detected in:

eRocket fixed vulnerable versions: >= * <= 1.2.4

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.