Medium 6.3 Unfixed Closed
2024-10-16≤ 1.2.8
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress LittleBot ACH for Stripe + Plaid Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress LittleBot ACH for Stripe + Plaid plugin <= 1.2.8 - Sensitive Information Disclosure vulnerability
WordPress LittleBot ACH for Stripe + Plaid plugin <= 1.2.8 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability