Input validation vulnerability in All-In-One Cufon 1.3.0

The Cufon plugin for WordPress, called the All-In-One Cufon, has a security issue that allows unauthorized access. This problem affects versions up to 1.3.0 and is caused by a missing or incorrect security measure. This means that someone who is not logged in to the website can potentially trick the website’s administrator into taking an action, such as clicking on a link, that will give them access.

Detected in:

All-In-One Cufon open vulnerable versions: >= * <= 1.3.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.