Extension WordPress
Vulnérabilités Arena.IM – Live Blogging for real-time events
Cette page rassemble les failles publiées pour Arena.IM – Live Blogging for real-time events, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Arena.IM – Live Blogging for real-time events
3 fiches
Arena.IM – Live Blogging for real-time events <= 0.4.1 – Cross-Site Request Forgery to Settings Update
The Arena.IM – Live Blogging for real-time events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.4.1. This is due to missing or incorrect nonce validation on the 'albfre_user_action' AJAX…
*-0.4.1
Non indiqué
11/12/2024
Arena.IM – Live Blogging for real-time events <= 0.4.1 – Authenticated (Contributor+) Stored Cross-Site Scripting via arena_embed_amp Shortcode
The Arena.IM – Live Blogging for real-time events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'arena_embed_amp' shortcode in all versions up to, and including, 0.4.1 due to insufficient input sanitization and output escaping…
*-0.4.1
Non indiqué
11/12/2024
Arena.IM – Live Blogging for real-time events <= 0.3.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Arena.IM – Live Blogging for real-time events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'arenablog' shortcode in all versions up to, and including, 0.3.0 due to insufficient input sanitization and output escaping…
*-0.3.0
0.4.0
11/12/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.