Fetch Designs WordPress Sign-up Sheets Code Injection Vulnerability

A code injection vulnerability has been identified in the Fetch Designs WordPress Sign-up Sheets plugin, affecting versions through 2.3.0.1. This vulnerability allows for improper control over the generation of code, enabling malicious actors to inject their own content into pages and posts. Such an injection could be exploited to introduce phishing pages or other harmful content into the website.

Impact

Exploitation of this vulnerability allows for content injection, where injected content could be used to create phishing pages or otherwise manipulate the site's content in a harmful way.

Remediation

Users of the Fetch Designs WordPress Sign-up Sheets plugin should update to version 2.3.1 or later. Patchstack users can enable auto-updates for vulnerable plugins.