Extension WordPress
Vulnérabilités AGCA – Custom Dashboard & Login Page
Cette page rassemble les failles publiées pour AGCA – Custom Dashboard & Login Page, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de AGCA – Custom Dashboard & Login Page
5 fiches
Absolutely Glamorous Custom Admin <= 7.2.3 – Authenticated (Admin+) Server-Side Request Forgery
The AGCA – Custom Dashboard & Login Page plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.2.3. This makes it possible for authenticated attackers, with administrator-level access and above, to…
*-7.2.3
7.2.4
24/04/2024
AGCA – Custom Dashboard & Login Page <= 7.2.1 – Authenticated (Admin+) Stored Cross-Site Scripting
The AGCA – Custom Dashboard & Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 7.2.1 due to insufficient input sanitization and output escaping. This makes…
*-7.2.1
7.2.2
04/04/2024
Custom Dashboard & Login Page < 6.9.5 – Admin+ Stored Cross-Site Scripting
The Custom Dashboard & Login Page WordPress plugin before 7.0 does not sanitise some of its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
*-6.9.5
7.0
30/12/2021
Absolutely Glamorous Custom Admin <= 6.8 – Authenticated Stored Cross-Site Scripting
Authenticated Stored Cross-Site Scripting (XSS) vulnerability in WordPress Absolutely Glamorous Custom Admin plugin (versions
*-6.8
6.9
23/09/2021
Custom Dashboard & Login Page – AGCA <= 6.5.4 – Reflected Cross-Site Scripting
The Custom Dashboard & Login Page – AGCA plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the tab parameter in versions up to, and including 6.5.4. This makes it possible for unauthenticated attackers to inject arbitrary…
*-6.5.4
6.5.5
08/09/2020
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.