Skip to content
OpenAdvisories

Vendor

wpdevpowers

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_d…