plugin
2 known security issues reported for the Bitcoin Faucet WordPress plugin. Most recent disclosed Sep 26, 2022.
Running Bitcoin Faucet on your site? Check whether your installed version is affected.
Scan your site free[en] The Bitcoin / Altcoin Faucet WordPress plugin through 1.6.0 does not have any CSRF check when saving its settings, allowing attacker to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues
The Bitcoin / Altcoin Faucet plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.0. This is due to missing or incorrect nonce validation when saving plugin settings. This makes it possible for unauthenticated attackers to change plugin settings, via forged request gran...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free