Log out
Get PRO

Latest

Input validation vulnerability in Cookie Params 0.2

  • Severity: medium-risk
  • Status: Open
  • Publication: May 31, 2022

The Cookie Params plugin for WordPress is not secure in versions up to 0.2. This plugin is vulnerable to Reflected Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF). This means that hackers can inject malicious code into the plugin without the user’s knowledge and use it to access the WordPress site. To protect against this, the plugin should be updated to add sanitization and nonce protection to the debug() and options_page() functions.

Detected in:

Cookie Params open vulnerable versions: >= * <= 0.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.