Extension WordPress
Vulnérabilités Zorem Local Pickup
Cette page rassemble les failles publiées pour Zorem Local Pickup, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Zorem Local Pickup
5 fiches
Advanced Local Pickup for WooCommerce <= 1.6.1 – Missing Authorization to Notice Dismissal
The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the admin_notices_for_alp_pro() function in versions up to, and including, 1.6.1. This makes it possible for…
*-1.6.1
1.6.2
22/04/2024
Advanced Local Pickup for WooCommerce <= 1.6.2 – Missing Authorization
The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the ~/include/customizer/customizer-admin.php file in versions up to, and including, 1.6.2. This makes it possible…
*-1.6.2
1.6.3
05/04/2024
Advanced Local Pickup for WooCommerce <= 1.5.5 – Authenticated (Administrator+) SQL Injection
The Advanced Local Pickup for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the id parameter in versions up to, and including, 1.5.5 due to insufficient escaping on the user supplied parameter and lack of…
*-1.5.5
1.6.0
21/10/2023
Advanced Local Pickup for WooCommerce <= 1.5.2 – Cross-Site Request Forgery
The Advanced Local Pickup for WooCommerce for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.2. This is due to missing or incorrect nonce validation on the functions wclp_update_state_dropdown_fun, wclp_update_work_hours_list_fun, wclp_update_edit_location_form_fun, and wclp_apply_work_hours_fun.…
*-1.5.2
1.5.3
31/03/2023
Advanced Local Pickup for WooCommerce <= 1.5.2 – Missing Authorization
The Advanced Local Pickup for WooCommerce for WordPress is vulnerable to unauthorized access of AJAX actions due to a missing capability check on the functions wclp_update_state_dropdown_fun, wclp_update_work_hours_list_fun, wclp_update_edit_location_form_fun, and wclp_apply_work_hours_fun in versions up to, and including, 1.5.2. This…
*-1.5.2
1.5.3
28/03/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.