Log out
Get PRO

Latest

Input validation vulnerability in OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) *

  • Severity: medium-risk
  • Status: Open
  • Publication: June 25, 2024

Several add-ons for WordPress are at risk of being hacked and redirecting users to harmful websites. This is because they rely on a tool called Polyfill.io. Polyfill.io is a type of code that helps websites run smoothly on older web browsers. Unfortunately, some bad people have taken control of Polyfill.io and are using it to send people to dangerous sites. Although not all WordPress add-ons that use Polyfill.io are dangerous, it’s best to update to a newer version of the add-on that doesn’t use Polyfill or to remove Polyfill.io from the add-on yourself.

Detected in:

Digital River Global Commerce fixed vulnerable versions: >= * <= *
Pixel Manager for WooCommerce – Track Conversions and Analytics, Google Ads, TikTok and more fixed vulnerable versions:
Pixel Manager for WooCommerce – Track Google Analytics, Google Ads, TikTok and more fixed vulnerable versions: >= * <= 1.43.3
Qualified Electronic Signatures by eID Easy fixed vulnerable versions: >= * <= *
Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission – WP User Frontend fixed vulnerable versions:
weForms – Easy Drag & Drop Contact Form Builder For WordPress fixed vulnerable versions: >= * <= *
WP User Frontend – Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submission Plugin fixed vulnerable versions: >= * <= 4.0.7
OpenStreetMap for Gutenberg and WPBakery Page Builder (formerly Visual Composer) open vulnerable versions: >= * <= *

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.