Input validation vulnerability in WP Meta and Date Remover 2.2.1

The WP Meta and Date Remover plugin for WordPress has a security vulnerability that can be exploited by unauthenticated attackers. This vulnerability, which exists in all versions up to and including 2.2.1, is due to missing or incorrect nonce validation on the updateSettings function. This allows attackers to change the plugin settings if they can get a site administrator to click on a malicious link.

Detected in:

WP Meta and Date Remover fixed vulnerable versions: >= * <= 2.3.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.