VYPR

Progressive License

by WordPress

CVEs (1)

  • CVE-2022-2171MedAug 1, 2022
    risk 0.35cvss 5.4epss 0.00

    The Progressive License WordPress plugin through 1.1.0 is lacking any CSRF check when saving its settings, which could allow attackers to make a logged in admin change them. Furthermore, as the plugin allows arbitrary HTML to be inserted in one of the settings, this could lead…