Medium 6.3
2024-10-16< 2.2
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Minimum safe version
2.3
Update to 2.3 or later to address 5 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Date Picker by Input WP – Sync bookings with external Calendars (.ics) Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Date Picker by Input WP – Sync bookings with external Calendars (.ics) plugin <= 2.1 - Sensitive Information Disclosure vulnerability
WordPress Date Picker by Input WP – Sync bookings with external Calendars (.ics) plugin <= 2.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability