Extension WordPress
Vulnérabilités CM Answers – Discussion Forum Plugin for WordPress Q&A
Cette page rassemble les failles publiées pour CM Answers – Discussion Forum Plugin for WordPress Q&A, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de CM Answers – Discussion Forum Plugin for WordPress Q&A
3 fiches
CM Answers <= 3.3.3 – Cross-Site Request Forgery
The CM Answers – Easy-to-use forum to grow your WP community plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.3. This is due to missing or incorrect nonce validation on…
*-3.3.3
3.3.4
22/04/2025
CM Answers <= 3.2.6 – Missing Authorization
The CM Answers – Powerful WordPress Forum Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.2.6. This makes it possible for…
*-3.2.6
3.2.7
10/12/2024
CM Answers <= 3.1.9 – Authenticated (Administrator+) Stored Cross-Site Scripting
The CM Answers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with…
*-3.1.9
3.2.0
23/02/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.