Extension WordPress
Vulnérabilités Gutenberg Block Editor Toolkit – EditorsKit
Cette page rassemble les failles publiées pour Gutenberg Block Editor Toolkit – EditorsKit, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Gutenberg Block Editor Toolkit – EditorsKit
4 fiches
Gutenberg Block Editor Toolkit – EditorsKit <= 1.40.4 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Gutenberg Block Editor Toolkit – EditorsKit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'editorskit' shortcode in all versions up to, and including, 1.40.4 due to insufficient input sanitization and output escaping on…
*-1.40.4
1.40.5
29/03/2024
EditorsKit <= 1.40.3 – Authenticated (Administrator+) Arbitrary File Upload
The EditorsKit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation on the 'import_styles' function in versions up to, and including, 1.40.3. This makes it possible for authenticated attackers with administrator-level capabilities…
*-1.40.3
1.40.4
16/12/2023
Freemius SDK <= 2.5.9 – Reflected Cross-Site Scripting via fs_request_get
The Freemius SDK for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘fs_request_get’ function in versions up to, and including, 2.5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
*-1.16
1.17
18/07/2023
EditorsKit <= 1.31.5 – Authenticated (Contributor+) Code Injection
The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code
*-1.31.5
1.31.6
13/09/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.