Extension WordPress
Vulnérabilités Bubble Menu – Floating Button Menu with Sticky Navigation
Cette page rassemble les failles publiées pour Bubble Menu – Floating Button Menu with Sticky Navigation, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Bubble Menu – Floating Button Menu with Sticky Navigation
4 fiches
Bubble Menu – circle floating menu <= 4.0.2 – Cross-Site Request Forgery
The Bubble Menu – circle floating menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.2. This is due to missing or incorrect nonce validation on a function. This makes it…
*-4.0.2
4.0.3
24/01/2025
Bubble Menu <= 3.0.4 – Authenticated (Admin+) Stored Cross-Site Scripting
The Bubble Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
[*, 3.0.5)
3.0.5
17/07/2023
Multiple Wow-Company Plugins (Various Versions) — Reflected Cross-Site Scripting via 'page' parameter
Several plugins by Wow-Company are vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in…
*-3.0.3
3.0.4
22/05/2023
Bubble Menu – circle floating menu <= 3.0.1 – Cross Site Request Forgery
The Bubble Menu – circle floating menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.1. This is due to missing nonce validation in the ~/admin/page-main.php file. This makes it possible…
*-3.0.1
3.0.2
20/01/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.