Plugin vulnerable for a long time

  • MatejKovacic

    (@matejkovacic)


    2 weeks, 4 days ago

    This plugin (WordPress Interactive Geo Maps plugin <= 1.6.30) in vulnerable to Reflected Cross Site Scripting (XSS) vulnerability. This vulnerability is known at last since beginning of September, I contacted developers, they promised they will look into issue, but did nothing.

    Our organization will now replace this plugin with something else. If you do not your website to be vulnerable, get rid of this plugin.

    Vulnerability is not the real problem here – unresponsiveness from the development team is.

You must be logged in to reply to this review.