N/A Unfixed Closed
2023-07-18≤ 1.0.3
WordPress Fast WordPress Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
WordPress Fast WordPress Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Unauthorised AJAX Calls via Freemius
WordPress Fast WordPress plugin <= 1.0.3 - Sensitive Information Disclosure vulnerability
WordPress Fast WordPress plugin <= 1.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability