Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in OSS Aliyun 1.4.10

  • Severity: critical
  • Status: Fixed
  • Publication: March 28, 2024

The plugin called OSS Aliyun for WordPress has a security issue in versions 1.4.10 and below. This is because it does not properly protect the information that users provide and does not properly prepare the existing database. This means that attackers who have administrator-level access or higher can add their own queries to the existing ones, which can lead to sensitive information being taken from the database.

Detected in:

OSS Aliyun fixed vulnerable versions: >= * <= 1.4.10

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.