plugin
2 known security issues reported for the Absolute Privacy WordPress plugin. Most recent disclosed Aug 9, 2023.
Running Absolute Privacy on your site? Check whether your installed version is affected.
Scan your site freeThe Absolute Privacy plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1. This is due to missing nonce validation on the 'abpr_profileShortcode' function. This makes it possible for unauthenticated attackers to change user email and password via a forged request grante...
The Absolute Privacy plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 2.0.5. This is due to improper handling of password verification. This makes it possible for unauthenticated attackers to log in with any legitimate username, including administrator accounts, and any pass...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free