Medium 6.3 Unfixed
2024-10-16≤ 2.0.7
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Minimum safe version
1.0.0
Update to 1.0.0 or later to address 3 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Abeta OCI PunchOut Plugin <= 0.4 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Abeta OCI PunchOut plugin <= 0.4 - Sensitive Information Disclosure vulnerability
WordPress Abeta OCI PunchOut plugin <= 0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability