Extension WordPress
Vulnérabilités Brandfolder – Digital Asset Management Simplified.
Cette page rassemble les failles publiées pour Brandfolder – Digital Asset Management Simplified., leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Brandfolder – Digital Asset Management Simplified.
2 fiches
Brandfolder <= 5.0.19 – Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
The Brandfolder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 5.0.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-5.0.19
5.0.20
15/07/2025
Brandfolder – Digital Asset Management Simplified. < 3.0.1 – Local/Remote File Inclusion
The Brandfolder – Digital Asset Management Simplified. plugin for WordPress is vulnerable to Local and Remote File Inclusion in versions up to, and including, 3.0 via the 'wp_abspath' parameter. This allows unauthenticated attackers to include remote files on…
[*, 3.0.1)
3.0.1
22/03/2016
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.