Medium 6.3
2024-10-16< 1.1.3
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Minimum safe version
1.1.13
Update to 1.1.13 or later to address 7 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2023-2813
CVE-2023-3708
WordPress Arendelle Theme < 1.1.13 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress Arendelle theme < 1.1.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
WordPress Arendelle theme < 1.1.3 - Sensitive Information Disclosure vulnerability