Extension WordPress
Vulnérabilités Blog Designer – Post and Widget
Cette page rassemble les failles publiées pour Blog Designer – Post and Widget, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Blog Designer – Post and Widget
3 fiches
Essentialplugin Plugins (Various Versions) – Injected Backdoor
All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions. This is due to the plugin being sold to a malicious threat actor that embedded a backdoor in all of the plugin's they…
2.7.7
2.7.7.1
09/04/2026
Multiple WPOnlineSupport Plugins <= (Various Versions) – Missing Authorization to Notice Dismissal
Multiple WPOnlineSupport plugins for WordPress are vulnerable to unauthorized modification of data due to a missing capability check on the wpos_anylc_admin_init_process() function hooked via admin_init in various versions. This makes it possible for unauthenticated attackers to dismiss a…
*-2.5.1
2.5.2
16/08/2023
Blog Designer – Post and Widget <= 2.3 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Blog Designer – Post and Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 2.3 due to insufficient input sanitization and output escaping on user supplied…
*-2.3
2.4
04/01/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.