The Recently viewed and most viewed products plugin for WordPress is not secure in all versions up to and including 1.1.1. Attackers with Shop Manager access or higher can inject malicious code into pages. When users access these pages, the code will be executed. This code can be used to gain access to private information or cause other harm.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
