Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Local Development 2.8.2

  • Severity: medium-risk
  • Status: Fixed
  • Publication: July 24, 2023

The Local Development plugin for WordPress is vulnerable to a type of attack known as Cross-Site Request Forgery (or CSRF) in versions up to, and including, 2.8.2. This means that it is possible for unauthenticated attackers to update plugin settings without permission if they can get a site administrator to do something like click on a link. This is due to the update_settings function not having the necessary validation to protect it.

Detected in:

Local Development fixed vulnerable versions: >= * <= 2.8.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.