Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in WPtouch 1.9.30

  • Severity: medium-risk
  • Status: Fixed
  • Publication: August 1, 2014

The WPtouch plugin for WordPress is vulnerable to an attack called an Open Redirect. This means that if someone uses a specific type of URL with the WPtouch plugin, it could cause them to be redirected to an external website that they did not intend to visit. This vulnerability affects versions of the WPtouch plugin which are earlier than 1.9.30. The vulnerability exists because the WPtouch plugin does not properly check the ‘wptouch_redirect’ parameter, which is the part of the URL that is used to cause the redirection.

Detected in:

WPtouch fixed vulnerable versions: >= * < 1.9.30
WPtouch – Make your WordPress Website Mobile-Friendly fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.