We frequently find that claims that vulnerabilities in WordPress plugins have been fixed are not accurate and that is the case with the plugin Visualizer: Tables and Charts Manager for WordPress. A Nathan Davison submitted two entries to the WPScan Vulnerability Database about a persistent cross-site scripting (XSS) and a server-side request forgery (SSRF) vulnerability in that plugin.

…

[Read more]