Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Alter 1.0

  • Severity: medium-risk
  • Status: Open
  • Publication: October 26, 2023

The Alter plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This means that versions up to and including 1.0 of the plugin are not properly protected from this type of attack. This means that if an attacker can trick a site administrator into clicking a link, they can modify the plugin’s settings without being authorized to do so. This is because the plugin does not properly validate the security measures it has in place.

Detected in:

Alter open vulnerable versions: >= * <= 1.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.