Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WordPress Plugin Digital Climate Strike WP Malicious Redirects (1.0.0) - Vulnerability Database

WordPress Plugin Digital Climate Strike WP Malicious Redirects (1.0.0)

Description

WordPress Plugin Digital Climate Strike WP is prone to malicious redirects. Attackers may leverage this issue to promote spam, distribute malware/backdoors, or to perform all kinds of malicious activities. WordPress Plugin Digital Climate Strike WP version 1.0.0 is vulnerable.

Remediation

Disable the plugin until a fix is available

References

https://wordpress.org/support/topic/plugin-loads-compromised-asset/
https://wordpress.org/plugins/digital-climate-strike-wp/#description

Related Vulnerabilities

Apache 2.x version older than 2.0.43 Medium
Common tags: Missing Update
WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor 'key' Parameter Security Bypass (1.1.24) High
Common tags: Missing Update
WordPress Plugin Track That Stat 'data' Parameter Cross-Site Scripting (1.0.8) High
Common tags: Missing Update
WordPress Plugin Subscribe2 Multiple Cross-Site Scripting Vulnerabilities (8.1) High
Common tags: Missing Update
WordPress Plugin SoundCloud Is Gold 'width' Parameter Cross-Site Scripting (2.1) High
Common tags: Missing Update

Severity

High

Classification

CWE-601
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

Missing Update