Description

WordPress Plugin OnePress Social Locker is prone to multiple unspecified vulnerabilities. No available information exists regarding these issues and their impact on a vulnerable website. WordPress Plugin OnePress Social Locker version 4.2.5 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 4.2.6 or latest

References

https://wordpress.org/plugins/social-locker/changelog/

Related Vulnerabilities

Zope Web Application Server Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) (CVE-2021-33507)

Contao Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35955)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-2222)

WordPress Plugin PixelYourSite-Facebook Pixel (Events, WooCommerce & Easy Digital Downloads) Multiple Unspecified Vulnerabilities (4.0.2)

WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-20330)

Severity

High

Tags

Missing Update