Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in WP Product Review Lite 3.7.6

  • Severity: high-risk
  • Status: Open
  • Publication: May 14, 2020

The WP Product Review Lite plugin for WordPress is vulnerable to a security issue that could allow attackers to inject malicious web scripts into pages of the website. This vulnerability affects versions of the plugin up to 3.7.5. When a user visits a page with a malicious script, the script will execute without authentication. This could be used to gain access to user data and compromise the security of the website. Developers of the plugin should upgrade to the latest version to protect their website from this vulnerability.

Detected in:

WP Product Review Lite open vulnerable versions: >= * < 3.7.6

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.