| Package | Affected versions | Patched versions |
|---|---|---|
| download plugins and themes from dashboard | ≤ 1.5.0 |
includes/settings/class-alg-download-plugins-settings.php in the download-plugins-dashboard plugin through 1.5.0 for WordPress has multiple unauthenticated stored XSS issues.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free