Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Waitlist Woocommerce ( Back in stock notifier ) 2.5.1

  • Severity: high-risk
  • Status: Fixed
  • Publication: January 13, 2022

XootiX has created several WordPress plugins that have a security vulnerability, which could allow an attacker to gain full control over a website. The vulnerability is found in the save_settings function located in the ~/includes/xoo-framework/admin/class-xoo-admin-settings.php file. Affected plugins include Login/Signup Popup, Waitlist Woocommerce (Back in stock notifier), and Side Cart Woocommerce (Ajax). Versions of these plugins earlier than 2.2, 2.5.1 and 2.0 respectively are susceptible to this vulnerability.

Detected in:

Waitlist Woocommerce ( Back in stock notifier ) fixed vulnerable versions: >= * <= 2.5.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.