Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Advanced Editor Tools 4.2.3

  • Severity: medium-risk
  • Status: Fixed
  • Publication: September 8, 2014

The TinyMCE Advanced plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. Versions up to and including 4.1.9 are affected. This is because it doesn’t have enough protection to stop malicious attacks. Unfortunately, this means that an unauthenticated attacker could potentially trick a site administrator and reset the plugin settings by sending a forged request.

Detected in:

Advanced Editor Tools fixed vulnerable versions: >= * < 4.2.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.