This plugin is really unsafe to use (Unautheticated injection)
-
Hello!
I have to propose a edit-request to this plugin.
In the file “index.php” on the line 188 the hook “wp_ajax_nopriv_*” is added and referenced to the save-function “se_save”.
This hook is the non-private ajax-hook. This means that anyone, without beeing logged in, with the correct request data, can do a post request and do injection to the sites header and footer.I have tried this myself and unfortunately it works. This opens up for everything from simple site defacing to keylogging of login forms etc.
The best thing is to remove the contents of line 188 to remove the public ajax-hook.
The plugin will still work as you have the authenticated ajax-hook added as well.Hope to hear from the author of this plugin! 🙂
The topic ‘This plugin is really unsafe to use (Unautheticated injection)’ is closed to new replies.
