The HTTP Headers plugin for WordPress has critical security vulnerabilities that allow for CRLF Injection and Stored Cross-Site Scripting attacks.
Two microblog posts report security vulnerabilities in the HTTP Headers plugin for WordPress, specifically CRLF Injection and Stored Cross-Site Scripting issues affecting all versions up to 1.19.2. These vulnerabilities pose risks to websit…