plugin

Verse O Matic Vulnerabilities

1 known security issue reported for the Verse O Matic WordPress plugin. Most recent disclosed Jul 19, 2021.

1 high

Running Verse O Matic on your site? Check whether your installed version is affected.

Verse-O-Matic <= 4.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting

high

The Verse-O-Matic WordPress plugin through 4.1.1 does not have any CSRF checks in place, allowing attackers to make logged in administrators do unwanted actions, such as add/edit/delete arbitrary verses and change the settings. Due to the lack of sanitisation in the settings and verses, this could also lead to Stored C...

CVSS:: 8.8
Affected:: up to 4.1.1
Fix:: No patched version reported
Disclosed:: Jul 19, 2021

CVE-2021-24466 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database