Digital River Global Commerce Vulnerabilities

Multiple plugins for WordPress are vulnerable to malicious redirection in various versions. This is due to the use of Polyfill.io. Polyfill.io is a JavaScript library used to streamline delivery of content across older browsers and was taken over by malicious threat actors that used the service to redirect victims to m...

CVSS:

5.3

Affected:

up to *

Fix:

No patched version reported

Disclosed:

Jun 25, 2024