Odude vulnerabilities
We track 4 vulnerabilities in Odude products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 11, 2025.
Latest Odude vulnerabilities
- 8.1 High severity
Flexi – Guest Submit: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in odude Flexi – Guest Submit flexi allows PHP Local File Inclusion.This issue affects Flexi – Guest Submit: from n/a through <= 4.28.
- 8.8 High severity
Crypto Tool: Cross-Site Request Forgery
The Crypto plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.15. This is due to missing nonce validation in the 'crypto_connect_ajax_process::check' function. This makes it possible for unauthenticated attacke
- 9.8 Critical severity
Crypto Tool: Authentication Bypass Using an Alternate Path or Channel
The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.18. This is due to a limited arbitrary method call to 'crypto_connect_ajax_process::log_in' function in the 'crypto_connect_ajax_process' function. This
- 9.8 Critical severity
Crypto Tool: Authentication Bypass Using an Alternate Path or Channel
The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.19. This is due to missing validation on the user being supplied in the 'crypto_connect_ajax_process::register' function. This makes it possible for unau