Medium 6.3
2024-10-16< 4.3
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Minimum safe version
4.4
Update to 4.4 or later to address 6 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2023-49842
WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Rocket Maintenance Mode & Coming Soon Page plugin <= 4.2 - Sensitive Information Disclosure vulnerability
WordPress Rocket Maintenance Mode & Coming Soon Page plugin <= 4.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability