Description

WordPress Plugin Velvet Blues Update URLs is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin Velvet Blues Update URLs version 2.1 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 3.0 or latest

References

https://wordpress.org/plugins/velvet-blues-update-urls/changelog/

Related Vulnerabilities

WordPress Plugin Product Catalog Privilege Escalation (3.8.1)

WordPress 3.8.x Same Origin Method Execution (SOME) Vulnerability (3.8 - 3.8.13)

EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7987)

Drupal Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2020-13664)

Zope Web Application Server Other Vulnerability (CVE-2000-0483)

Severity

High

Tags

Missing Update