Input validation vulnerability in Image Zoom 1.8.8

The Image Zoom plugin for WordPress has a security vulnerability in versions up to and including 1.8.8. This vulnerability means that unauthenticated attackers can take control of the plugin by sending a specially crafted link to an administrator. This link can make the administrator perform unwanted actions without their knowledge. To fix this issue, the plugin must be updated to a version where nonce validation is in place.

Detected in:

Image Zoom open vulnerable versions: >= * <= 1.8.8

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.