Description

WordPress Plugin WordPress Custom Global Variable is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin WordPress Custom Global Variable version 3.0.0 is vulnerable; prior versions may also be affected.

Remediation

Disable the plugin until a fix is available

References

https://wordpress.org/plugins/wp-global-variable/#description

Related Vulnerabilities

PHP Inadequate Encryption Strength Vulnerability (CVE-2020-7069)

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3738)

Magento Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') Vulnerability (CVE-2019-8126)

Handlebars Other Vulnerability (CVE-2021-23383)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-1765)

Severity

High

Tags

Missing Update