Log out
Get PRO

Latest

Input validation vulnerability in FeedWordPress 2014.0805

  • Severity: medium-risk
  • Status: Open
  • Publication: April 26, 2015

The FeedWordPress plugin for WordPress is vulnerable to a type of attack called Cross-Site Scripting. This vulnerability affects versions of the plugin that were released before 2015.0426, and it happens because the plugin does not properly check for malicious input or properly secure the information it outputs. This makes it possible for attackers to inject malicious scripts into the browser of a victim, which can then be executed.

Detected in:

FeedWordPress open vulnerable versions: >= * <= 2014.0805

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.