Extension WordPress
Vulnérabilités Advanced Product Labels for WooCommerce
Cette page rassemble les failles publiées pour Advanced Product Labels for WooCommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Advanced Product Labels for WooCommerce
2 fiches
BeRocket Plugins <= (Various Versions) – Missing Authorization
Several BeRocket Plugins for WordPress are vulnerable to authorization bypass due to missing capability checks on functions corresponding to AJAX actions that are available to subscribers. This includes the close_notice, subscribe, disable_rate_notice, feature_request_send, get_plugin_error_ajax, close_notice, and test_key functions…
*-1.2.4
1.2.4.1
13/12/2022
Advanced Product Labels for WooCommerce <= 1.2.3.6 – Reflected Cross-Site Scripting
The Advanced Product Labels for WooCommerce WordPress plugin before 1.2.3.7 does not sanitise and escape the tax_color_set_type parameter before outputting it back in the berocket_apl_color_listener AJAX action's response, leading to a Reflected Cross-Site Scripting
[*, 1.2.3.7)
1.2.3.7
15/02/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.