Extension WordPress
Vulnérabilités Co-marquage service-public.fr
Cette page rassemble les failles publiées pour Co-marquage service-public.fr, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Co-marquage service-public.fr
4 fiches
Co-marquage service-public.fr <= 0.5.77 – Cross-Site Request Forgery
The Co-marquage service-public.fr plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.5.77. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers…
*-0.5.77
Non indiqué
31/12/2025
Co-marquage service-public.fr <= 0.5.76 – Reflected Cross-Site Scripting via add_query_arg Parameter
The Co-marquage service-public.fr plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 0.5.76. This makes it possible for unauthenticated…
*-0.5.76
0.5.77
20/11/2024
Co-marquage service-public.fr <= 0.5.72 – Reflected Cross-Site Scripting via search_term
The Co-marquage service-public.fr plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and including, 0.5.72 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
*-0.5.72
0.5.73
25/03/2024
Co-marquage service-public.fr <= 0.5.71 – Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
The Co-marquage service-public.fr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 0.5.71 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…
*-0.5.71
0.5.72
25/03/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.