Extension WordPress
Vulnérabilités Target Video Easy Publish
Cette page rassemble les failles publiées pour Target Video Easy Publish, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Target Video Easy Publish
5 fiches
Target Video Easy Publish <= 3.8.8 – Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder_img Parameter
The Target Video Easy Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘placeholder_img’ parameter in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping. This makes it possible…
*-3.8.8
3.8.9
27/01/2026
Target Video Easy Publish <= 3.8.5 – Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
The Target Video Easy Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 3.8.5 due to insufficient input sanitization and output escaping. This makes it possible…
*-3.8.5
3.8.6
17/06/2025
Target Video Easy Publish <= 3.8.5 – Authenticated (Subscriber+) Arbitrary Shortcode Execution
The The Target Video Easy Publish plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.8.5. This is due to the software allowing users to execute an action that does not…
*-3.8.5
Non indiqué
17/04/2025
Target Video Easy Publish <= 3.8.3 – Authenticated (Contributor+) Stored Cross-Site Scripting via brid_override_yt Shortcode
The Target Video Easy Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's brid_override_yt shortcode in all versions up to, and including, 3.8.3 due to insufficient input sanitization and output escaping on user supplied…
*-3.8.3
3.8.4
28/01/2025
Target Video Easy Publish <= 3.8.3 – Cross-Site Request Forgery to Stored Cross-Site Scripting
The Target Video Easy Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the resync_carousel(), seek_snapshot(), uploaded_cc(), and remove_cc()…
*-3.8.3
3.8.4
24/01/2025
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.