Medium 6.3
2024-10-16< 2.0.0
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Minimum safe version
2.0.0
Update to 2.0.0 or later to address 4 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Alley Business Toolkit Plugin <= 2.0.6 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Alley Business Toolkit plugin <= 1.1.7 - Sensitive Information Disclosure vulnerability
WordPress Alley Business Toolkit plugin <= 1.1.7 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability