WordPress PowerPack Lite Plugin XSS Vulnerability (<=1.3.1) Advisory

Vulnerability Overview Vulnerability Name: WordPress PowerPack Lite for Beaver Builder Plugin ≤ 1.3.1 contains a medium-priority Cross-Site Scripting (XSS) vulnerability. Vulnerability Type: Cross-Site Scripting (XSS) Priority: Medium CVSS Score: 5.3 Publication Date: January 12, 2024 Scope of Impact Affected Plugin: PowerPack Lite for Beaver Builder Affected Versions: ≤ 1.3.1 Impact Description: This vulnerability allows attackers to execute malicious scripts in the victim's browser, potentially leading to session hijacking, data theft, or website defacement. Remediation Immediate Action: It is recommended to immediately upgrade or disable the plugin. Automated Fix: Use Patchstack to automatically remediate the vulnerability and protect your website. Manual Fix: Upgrade to version 1.3.2 or higher to resolve this vulnerability. Detailed Information Plugin Name: PowerPack Lite for Beaver Builder Plugin Version: ≤ 1.3.1 Vulnerability Type: XSS CVSS Score: 5.3 Timeline Report Date: January 12, 2024 Fix Date: January 12, 2024 Frequently Asked Questions How to protect my website from this vulnerability? How to fix the vulnerability? Why is my website flagged as vulnerable? Has my website already been compromised? Additional Information Vulnerability Source: Patchstack Vulnerability Database: Patchstack Vulnerability Database Vulnerability Classification: Cross-Site Scripting (XSS) Vulnerability Severity: Medium Remediation Recommendations Immediate Action: Upgrade or disable the affected plugin. Automated Fix: Use the Patchstack automated remediation tool. Manual Fix: Upgrade to the latest version. Contact Information Support Email: support@patchstack.com Official Website: https://patchstack.com Disclaimer Liability Statement: This information is for educational and research purposes only and does not constitute legal advice. Supplementary Information Vulnerability Details: No specific POC code or exploit code is provided. Remediation Guide: Please refer to the detailed remediation guide provided by Patchstack. Summary This vulnerability affects WordPress PowerPack Lite for Beaver Builder Plugin versions ≤ 1.3.1, presenting a medium-priority Cross-Site Scripting (XSS) vulnerability. It is recommended to immediately upgrade or disable the plugin and use the Patchstack automated remediation tool for fixing the issue.

Goal Reached Thanks to every supporter — we hit 100%!

WordPress PowerPack Lite Plugin XSS Vulnerability (<=1.3.1) Advisory

More from this source