plugin

Wp Sendfox Vulnerabilities

2 known security issues reported for the Wp Sendfox WordPress plugin. Most recent disclosed Oct 15, 2024.

2 medium

Running Wp Sendfox on your site? Check whether your installed version is affected.

Scan your site free

WP SendFox <= 1.3.1 - Unauthenticated Information Disclosure

medium

The WP SendFox plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.1. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.

CVSS:
5.3
Affected:
up to 1.3.1
Fix:
No patched version reported
Disclosed:
Oct 15, 2024

CVE-2024-49284 on NVD →

WP SendFox <= 1.3.0 - Missing Authorization

medium

The WP SendFox plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the gb_sf4wp_process_sync() function in versions up to, and including, 1.3.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to process synchronization.

CVSS:
4.3
Affected:
up to 1.3.0
Fixed in:
1.3.1
Disclosed:
Mar 13, 2024

CVE-2024-27970 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database