plugin
7 known security issues reported for the Video Synchro Pdf WordPress plugin. Most recent disclosed Apr 25, 2022.
Running Video Synchro Pdf on your site? Check whether your installed version is affected.
Scan your site free[en] The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p parameter before using it in an include statement, which could lead to Local File Inclusion issues
The Videos sync PDF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's settings in versions up to, and including, 1.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with admin-level privileges to inject arbitrary web scrip...
Stored Cross-Site Scripting via Cross-Site Request Forgery (CSRF) vulnerability discovered by UnD3sc0n0c1d0 in WordPress Videos sync PDF plugin (versions <= 1.7.4).
The Videos sync PDF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's settings in versions up to, and including, 1.7.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with admin-level privileges to inject arbitrary web scrip...
The Videos sync PDF plugin for WordPress is vulnerable to Local File Inclusion in versions up to an equal to 1.7.4 via the `p` parameter found in the ~/video-synchro-pdf/reglages/Menu_Plugins/tout.php file.
Unauthenticated Local File Inclusion (LFI) vulnerability discovered by Hassan Khan Yusufzai (Splint3r7) in WordPress Videos sync PDF plugin (versions <= 1.7.4).
The plugin does not have CSRF check in place when editing a video, and does not escape some of its fields, which could allow attackers to make a logged in admin change them and lead to Stored Cross-Site Scripting issues
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free