WP Rollback – Rollback Plugins and Themes [wp-rollback] < 1.2.3
unknown[en] The wp-rollback plugin before 1.2.3 for WordPress has CSRF.
- Affected:
- up to 1.2.3
- Fixed in:
- 1.2.3
- Disclosed:
- Aug 27, 2019
plugin
5 known security issues reported for the Wp Rollback WordPress plugin. Most recent disclosed Aug 27, 2019.
Running Wp Rollback on your site? Check whether your installed version is affected.
Scan your site free[en] The wp-rollback plugin before 1.2.3 for WordPress has CSRF.
[en] The wp-rollback plugin before 1.2.3 for WordPress has XSS.
The wp-rollback plugin before 1.2.3 for WordPress has CSRF.
The wp-rollback plugin before 1.2.3 for WordPress has Cross-Site Scripting.
This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Because of XSS vulnerability, the attackers can display any content with no filter from a simple URL, easy to include any remote malicious javascript file. Because of CSRF, anyone can force the installation of any plugin from...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free