Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Add Hierarchy (parent) to post 3.12

  • Severity: medium-risk
  • Status: Fixed
  • Publication: August 1, 2022

The Add Hierarchy plugin for WordPress is vulnerable to a type of attack called Reflected Cross-Site Scripting (known as XSS). This type of attack can occur when a website uses certain pieces of code which don’t have enough security measures in place. In this instance, the issue is with versions up to, and including, 3.12. If an unauthenticated attacker can trick a user into clicking on a link, they can inject malicious web scripts into pages. This can be done by using a special type of URL.

Detected in:

Add Hierarchy (parent) to post fixed vulnerable versions: >= * <= 3.12

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.