Medium 6.3
2024-10-16< 1.4.17
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Minimum safe version
1.4.28
Update to 1.4.28 or later to address 5 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress CartPops – High Converting Add To Cart Popup For WooCommerce Plugin <= 1.4.26 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress CartPops – High Converting Add To Cart Popup For WooCommerce plugin <= 1.4.16 - Sensitive Information Disclosure vulnerability
WordPress CartPops – High Converting Add To Cart Popup For WooCommerce plugin <= 1.4.16 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability