Log out
Get PRO

Latest

Input validation vulnerability in Q2W3 Post Order 1.2.8

  • Severity: medium-risk
  • Status: Open
  • Publication: November 7, 2023

The Q2W3 Post Order plugin for WordPress is not secure in versions up to and including 1.2.8. An attacker can inject malicious web scripts into these versions of the plugin by tricking a user into performing an action like clicking on a link. This could allow them to gain access to private information or take control of the website. It is important to update to the newest version of the plugin to ensure your website is secure.

Detected in:

Q2W3 Post Order open vulnerable versions: >= * <= 1.2.8

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.