plugin

Pre Publish Checklist Vulnerabilities

1 known security issue reported for the Pre Publish Checklist WordPress plugin. Most recent disclosed Sep 22, 2023.

1 medium

Running Pre Publish Checklist on your site? Check whether your installed version is affected.

Pre-Publish Checklist <= 1.1.1 - Insecure Direct Object Reference to Arbitrary Post '_ppc_meta_key' Update

medium

The Pre-Publish Checklist plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 1.1.1 via the ppc_meta_box_ajax_add_handler and ppc_meta_box_ajax_delete_handler functions due to missing validation on a user controlled key. This can allow authenticated attackers with co...

CVSS:: 5.3
Affected:: up to 1.1.2
Fixed in:: 1.1.2
Disclosed:: Sep 22, 2023

CVE-2023-44151 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database