The Parcel Pro plugin for WordPress is not secure in versions up to and including 1.6.5. This means that it is possible for people who are not authorized to access the website to redirect users to dangerous websites if they can get them to do something. The problem is caused by not properly checking the website address that is given with the ‘redirect’ parameter.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
