paulio21 Zip Code Redirect vulnerabilities (CVE)

CVE records published for paulio21 Zip Code Redirect, newest first. Follow to get an email when a new one appears.

1 results
6.3Medium
CVE-2022-4974

Freemius SDK <= 2.4.2 - Missing Authorization Checks

dashlabsltd YASR – Yet Another Star Rating Plugin for WordPress; nicheaddons Events Addon for Elementor; dots Fraud Prevention For WooCommerce and EDD; wpengine Gutenberg Blocks – ACF Blocks Suite

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_d…