Log out
Get PRO

Latest

Input validation vulnerability in Where I Was, Where I Will Be 1.1.1

  • Severity: critical
  • Status: Open
  • Publication: June 13, 2024

The Where I Was, Where I Will Be plugin for WordPress has a security issue in version 1.1.1 or lower. This problem allows attackers to access and run files from other servers without being authenticated. This means that they can run any PHP code in those files, which can lead to unauthorized access, stealing of private information, or running harmful code. However, this vulnerability can only be exploited if the allow_url_include setting is enabled, which is not usually the case.

Detected in:

Where I Was, Where I Will Be open vulnerable versions: >= * <= 1.1.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.