Medium 6.3
2024-10-16< 2.3
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Minimum safe version
2.3.6
Update to 2.3.6 or later to address 5 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress CodeKit – Custom Codes Editor Plugin < 2.3.6 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress CodeKit – Custom Codes Editor plugin <= 2.2.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
WordPress CodeKit – Custom Codes Editor plugin <= 2.2.9 - Sensitive Information Disclosure vulnerability