plugin
8 known security issues reported for the Hermit WordPress plugin. Most recent disclosed Apr 28, 2022.
Running Hermit on your site? Check whether your installed version is affected.
Scan your site freeHermit 音乐播放器 <= 3.1.6 is vulnerable to Cross-Site Request Forgery. This allow attackers to delete cache, delete a source, create source.
Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress via title parameter.
Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 is vulnerable to SQL injection. This allows unauthenticated attackers to execute SQLi attack via (&id). Versions up to 3.1.6 are affected.
Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 is vulnerable to SQL injection. This allows authenticated attackers with Subscriber or higher user roles to execute SQLi attack via (&ids). Versions up to 3.1.6 are affected.
[en] SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers to execute SQLi attack via (&id).
[en] Authenticated SQL Injection (SQLi) vulnerability in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allows attackers with Subscriber or higher user roles to execute SQLi attack via (&ids).
[en] Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Hermit 音乐播放器 plugin <= 3.1.6 on WordPress allow attackers to delete cache, delete a source, create source.
[en] Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in Mufeng's Hermit 音乐播放器 plugin <= 3.1.6 on WordPress via &title parameter.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free