Lucene search

K
patchstackWPScanPATCHSTACK:59F50A903D5119AFC241D1B257462C7A
HistoryAug 01, 2022 - 12:00 a.m.

WordPress Social Slider Feed plugin <= 2.0.4 - Authenticated Arbitrary API Key Update vulnerability leading to Stored Cross-Site Scripting (XSS)

2022-08-0100:00:00
WPScan
patchstack.com
8

Authenticated Arbitrary API Key Update vulnerability leading to Stored Cross-Site Scripting (XSS) discovered by WPScan in WordPress Social Slider Feed plugin (versions <= 2.0.4).

Solution

           Update the WordPress Social Slider Feed plugin to the latest available version (at least 2.0.5).
CPENameOperatorVersion
social slider feedle2.0.4