plugin

Gtbabel Vulnerabilities

1 known security issue reported for the Gtbabel WordPress plugin. Most recent disclosed Feb 17, 2025.

1 high

Running Gtbabel on your site? Check whether your installed version is affected.

Gtbabel <= 6.6.8 - Unauthenticated Cookie Stealing

high

The Gtbabel plugin for WordPress is vulnerable to cookie stealing in all versions up to, and including, 6.6.8. This is due to the plugin transmitting cookie data via a URL. This makes it possible for unauthenticated attackers to steal admin cookies which may make privilege escalation possible, if they can successfully...

CVSS:: 7.5
Affected:: up to 6.6.8
Fixed in:: 6.6.9
Disclosed:: Feb 17, 2025

CVE-2024-11638 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database