Medium 6.5 Unfixed
2025-09-22≤ 2.2.8
WordPress Genealogical Tree Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS)
Minimum safe version
2.2.1
Update to 2.2.1 or later to address 5 fixable vulnerabilities
WordPress Genealogical Tree Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Genealogical Tree – WordPress Family Tree Plugin <= 2.2.0.8 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Genealogical Tree – WordPress Family Tree plugin <= 2.1.4 - Sensitive Information Disclosure vulnerability
WordPress Genealogical Tree – WordPress Family Tree plugin <= 2.1.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability