Extension WordPress

Vulnérabilités Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress

Cette page rassemble les failles publiées pour Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.

4Vulnérabilités
0Critiques
4Avec correctif
8,1CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress

4 fiches

CVE-2025-8420 Élevée · 8,1
Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress

Multiple Plugins by emarket-design <= Multiple Versions – Unauthenticated Limited Remote Code Execution

Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code Execution in various versions via the emd_form_builder_lite_pagenum function. This is due to the plugin not properly validating user input before using it as…

Versions affectées

*-1.9.2

Correctif

1.9.3

Publication

05/08/2025

CVE-2025-8313 Moyenne · 6,4
Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress

Campus Directory <= 1.9.1 – Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter

The Campus Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccess_msg’ parameter in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

Versions affectées

*-1.9.1

Correctif

1.9.2

Publication

04/08/2025

CVE-2025-5532 Moyenne · 6,4
Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress

Faculty Staff and Student Directory Plugin – Campus Directory <= 1.9.0 – Authenticated (Contributor+) Stored Cross-Site Scripting

The Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'emd_mb_meta' shortcode in all versions up to, and including, 1.9.0 due to insufficient input…

Versions affectées

*-1.9.0

Correctif

1.9.1

Publication

03/06/2025

Vulnérabilité Moyenne · 5,5
Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress

Faculty Staff and Student Directory Plugin – Campus Directory <= 1.7.4 – Authenticated Stored Cross-Site Scripting

The Faculty Staff and Student Directory Plugin – Campus Directory plugin for WordPress is vulnerable to authenticated stored cross-site scripting via several parameters found in versions up to and including 1.7.4.

Versions affectées

*-1.7.4

Correctif

1.7.5

Publication

05/04/2022

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités