Log out
Get PRO

Latest

Output validation vulnerability in CMS Commander – Manage Multiple Sites 2.22

  • Severity: high-risk
  • Status: Fixed
  • Publication: June 1, 2016

The CMS Commander plugin for WordPress, which helps manage multiple websites, has a security flaw in versions up to 2.21. This flaw can allow unauthenticated attackers to add malicious code to the website. This code could be used to delete files, access sensitive information, or even execute code. There is no protection against this flaw within the plugin itself, and if another plugin or theme installed on the website also has a weakness, it could make the flaw even worse.

Detected in:

CMS Commander – Manage Multiple Sites fixed vulnerable versions: >= * < 2.22

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.