Plugin flagged for unpatched security flaws
Security scans and hosts flag the plugin for ReDoS, broken access control and XSS flaws, and owners see no patch or clear fix.
Tier II · Emerging Problems that are still building up.
3 public reports · first reported 26 July 2023 · last reported 31 October 2025
What's going wrong
Site owners on managed hosts and those running security scans report that the plugin is flagged for several issues, including a regular expression that can be abused, broken access control that lets unauthenticated users act as admins, and a cross-site scripting flaw.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 3 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.