Medium 6.3
2024-10-16< 1.0.5
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Minimum safe version
1.0.14
Update to 1.0.14 or later to address 6 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Amela Theme < 1.0.14 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-3708
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Amela theme < 1.0.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
WordPress Amela theme < 1.0.5 - Sensitive Information Disclosure vulnerability