Medium 6.1
2026-05-01< 3.1.28
CVE-2024-13362
Minimum safe version
3.1.28
Update to 3.1.28 or later to address 6 fixable vulnerabilities
CVE-2024-13362
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Pay For Post with WooCommerce Plugin <= 3.1.10 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Pay For Post with WooCommerce plugin < 3.0.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
WordPress Pay For Post with WooCommerce plugin < 3.0.9 - Sensitive Information Disclosure vulnerability