Extension WordPress
Vulnérabilités BeeTeam368 Extensions
Cette page rassemble les failles publiées pour BeeTeam368 Extensions, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de BeeTeam368 Extensions
3 fiches
BeeTeam368 Extensions <= 1.9.4 – Unauthenticated Local File Inclusion
The BeeTeam368 Extensions plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution…
*-1.9.4
Non indiqué
30/07/2025
BeeTeam368 Extensions <= 2.3.5 – Authenticated (Subscriber+) Arbitrary File Upload
The BeeTeam368 Extensions plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_submit_upload_file() function in all versions up to, and including, 2.3.5. This makes it possible for authenticated attackers with…
*-2.3.5
2.3.6
11/07/2025
BeeTeam368 Extensions <= 2.3.4 – Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion
The BeeTeam368 Extensions plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_remove_temp_file() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions…
*-2.3.4
2.3.5
27/06/2025
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.