Extension WordPress
Vulnérabilités CM Custom Reports – Flexible reporting to track what matters most
Cette page rassemble les failles publiées pour CM Custom Reports – Flexible reporting to track what matters most, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de CM Custom Reports – Flexible reporting to track what matters most
2 fiches
CM Custom Reports <= 1.2.7 – Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Labels
The CM Custom Reports – Flexible reporting to track what matters most plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.7 due to insufficient input sanitization and…
*-1.2.7
1.2.8
19/03/2026
CM Custom Reports <= 1.2.7 – Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameters
The CM Custom Reports plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'date_from' and 'date_to' parameters in all versions up to, and including, 1.2.7 due to insufficient input sanitization and output escaping. This makes it…
*-1.2.7
1.2.8
06/03/2026
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.