Medium 6.3 Unfixed Closed
2024-10-16≤ 1.0.19
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress HQTheme Extra Plugin <= 1.0.19 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress HQTheme Extra plugin <= 1.0.18 - Sensitive Information Disclosure vulnerability
WordPress HQTheme Extra plugin <= 1.0.18 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability