Description

WordPress Plugin PWA for WP & AMP is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin PWA for WP & AMP version 1.0.8 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.0.9 or latest

References

https://plugins.svn.wordpress.org/pwa-for-wp/trunk/readme.txt

Related Vulnerabilities

WordPress Plugin Rich Table of Contents Cross-Site Scripting (1.3.7)

Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-10910)

PleskWin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2013-0132)

WordPress Plugin Multisite Global Search 'mssearch' Parameter Cross-Site Scripting (1.2.5)

WordPress Plugin Youtube Channel Gallery Cross-Site Scripting (2.4)

Severity

High

Tags

Missing Update