Log out
Get PRO

Latest

Input validation vulnerability in exit-strategy 1.55

  • Severity: medium-risk
  • Status: Open
  • Publication: May 28, 2013

The plugin called “exit-strategy” for WordPress has a security issue that affects all versions, including 1.55. This is because the function called “exit_page_admin()” does not properly check for a special code to make sure the request is legitimate. Because of this, someone who is not logged in can change the plugin’s settings if they can trick the person who manages the website into clicking on a link.

Detected in:

WordPress Exit Strategy fixed vulnerable versions:
exit-strategy open vulnerable versions: >= * <= 1.55

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.