Medium 6.3 Unfixed Closed
2024-10-16≤ 2.4.0
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Кнопка Яндекс Денег Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Кнопка Яндекс Денег plugin <= 2.3.3 - Reflected Cross-Site Scripting (XSS) vulnerability
WordPress Кнопка Яндекс Денег plugin <= 2.4.0 - Sensitive Information Disclosure vulnerability
WordPress Кнопка Яндекс Денег plugin <= 2.4.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
CVE-2021-24435