Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in TemplatesNext ToolKit 3.2.7

  • Severity: medium-risk
  • Status: Open
  • Publication: January 17, 2023

The TemplatesNext ToolKit plugin for WordPress has a security vulnerability that could allow attackers to include malicious code in the pages of the website. This vulnerability exists in versions up to and including 3.2.7. An attacker with access to the website as a contributor could inject code into pages that would run every time a user views it. This is possible because of weak security measures that do not properly filter input or protect output.

Detected in:

TemplatesNext ToolKit open vulnerable versions: >= * <= 3.2.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.