Digital Climate Strike Wp Vulnerabilities

The Digital Climate Strike WP for WordPress contains a malicious redirect in versions up to, and including, 1.0.0. This is due to a compromised JS asset in the https://assets.digitalclimatestrike.net/widget.js file. This makes it possible for unauthenticated attackers to redirect all traffic on the site to a malicious...

CVSS:

7.1

Affected:

up to 1.0.0

Fix:

No patched version reported

Disclosed:

Jan 21, 2021