Extension WordPress
Vulnérabilités Calendarista Basic Edition – WordPress appointment booking system
Cette page rassemble les failles publiées pour Calendarista Basic Edition – WordPress appointment booking system, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Calendarista Basic Edition – WordPress appointment booking system
3 fiches
Calendarista Basic Edition <= 3.0.2 – Cross-Site Request Forgery
The Calendarista Basic Edition plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.2. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated…
*-3.0.2
3.0.3
10/04/2024
Calendarista Basic Edition <= 3.0.5 – Missing Authorization
The Calendarista Basic Edition plugin for WordPress is vulnerable to unauthorized access due to a missing capability check in versions up to, and including, 3.0.5. This makes it possible for unauthenticated attackers to perform an unauthorized action.
*-3.0.5
3.0.6
29/03/2024
Calendarista Basic Edition <= 3.0.2 – Unauthenticated Cross-Site Scripting
The Calendarista Basic Edition plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
*-3.0.2
3.0.3
15/03/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.