Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Debug Bar – Enable WP_DEBUG from admin dashboard 1.85

  • Severity: medium-risk
  • Status: Fixed
  • Publication: August 1, 2022

The Debug Bar plugin for WordPress has a vulnerability that can allow unauthenticated attackers to inject malicious code into webpages. This vulnerability affects versions up to 1.85 of the plugin and is caused by the plugin’s use of add_query_arg/remove_query_arg without properly sanitizing and escaping its inputs and outputs. This vulnerability can be exploited if a user is tricked into clicking on a link or performing another type of action.

Detected in:

Debug Bar – Enable WP_DEBUG from admin dashboard fixed vulnerable versions: >= * <= 1.85

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.