plugin

Lazy Load Vulnerabilities

4 known security issues reported for the Lazy Load WordPress plugin. Most recent disclosed Jul 20, 2016.

1 high

Running Lazy Load on your site? Check whether your installed version is affected.

Scan your site free

Lazy Load < 0.6.1 - Authenticated Stored Cross-Site Scripting

high

The Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter in versions before 0.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user a...

CVSS:
7.4
Affected:
up to 0.6.1
Fixed in:
0.6.1
Disclosed:
Jul 20, 2016

Lazy Load [lazy-load] < 0.6.1

unknown

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Update the plugin.

Affected:
up to 0.6.1
Fixed in:
0.6.1
Disclosed:
Jul 20, 2016

Lazy Load [lazy-load] < 0.6.1

unknown

The Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter in versions before 0.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user a...

Affected:
up to 0.6.1
Fixed in:
0.6.1
Disclosed:
Jul 20, 2016

Lazy Load [lazy-load] < 0.6.1

unknown

The Lazy Load WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affected:
up to 0.6.1
Fixed in:
0.6.1

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database