plugin
4 known security issues reported for the Wpgsi Professional WordPress plugin. Most recent disclosed Dec 24, 2021.
Running Wpgsi Professional on your site? Check whether your installed version is affected.
Scan your site freeThe Spreadsheet Integration and Spreadsheet Integration Professional plugins for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.0. This is due to missing or incorrect nonce validation on the 'wpgsi_WorksheetColumnsTitle' function. This makes it possible for unauthenticated a...
The Spreadsheet Integration and Spreadsheet Integration Professional plugins for WordPress are vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scr...
The plugin does not properly check for CSRF in its wpgsi_WorksheetColumnsTitle function, by making a request without the nonce parameter. This could allow attacker to make logged in admins call it
The plugin does not sanitise or escape some parameters before outputting them back in the admin dashboard, leading to reflected Cross-Site Scripting issues
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free