Extension WordPress
Vulnérabilités Website Builder by SeedProd , Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode
Cette page rassemble les failles publiées pour Website Builder by SeedProd , Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Website Builder by SeedProd , Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode
10 fiches
Website Builder by SeedProd – Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.20.2 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'seedprodnestedmenuwidget' Shortcode
The Website Builder by SeedProd – Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `seedprodnestedmenuwidget` shortcode in all versions up to, and including, 6.20.2…
*-6.20.2
6.20.3
08/07/2026
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd <= 6.19.8 – Authenticated (Editor+) Server-Side Request Forgery
The Website Builder by SeedProd , Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.19.8. This makes it possible for…
*-6.19.8
6.19.9
14/03/2026
Website Builder by SeedProd , Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.19.8 – Missing Authorization
The Website Builder by SeedProd , Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and…
*-6.19.8
6.19.9
24/12/2025
Website Builder by SeedProd , Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.18.15 – Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
The Website Builder by SeedProd , Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'seedprod_lite_get_revisisons' function in all…
*-6.18.15
6.18.16
08/05/2025
Website Builder by SeedProd , Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.18.9 – Cross-Site Request Forgery
The Website Builder by SeedProd , Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.18.9. This is due to missing…
*-6.18.9
6.18.10
09/11/2024
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd <= 6.17.4 – Authenticated (Editor+) Stored Cross-Site Scripting
The Website Builder by SeedProd , Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 6.17.4 due to insufficient input sanitization…
*-6.17.4
6.18.4
24/09/2024
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd <= 6.15.20 – Cross-Site Request Forgery to Notice Dismissal
The Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.15.20. This is due to missing or incorrect nonce validation on the…
*-6.15.20
6.15.21
11/04/2024
Website Builder by SeedProd , Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode <= 6.15.21 – Missing Authorization via seedprod_lite_new_lpage
The Website Builder by SeedProd , Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the seedprod_lite_new_lpage function in all…
*-6.15.21
6.15.22
31/01/2024
Website Builder by SeedProd <= 6.15.13.1 – Cross-Site Request Forgery to Settings Update
The Website Builder by SeedProd plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.15.13.1. This is due to missing or incorrect nonce validation on functionality in the builder.php file. This makes…
*-6.15.13.1
6.15.15.3
18/09/2023
Coming Soon Page by SeedProd <= 5.1.1 – Authenticated Stored Cross-Site Scripting
The SeedProd Coming Soon plugin before 5.1.2 for WordPress allows XSS.
[*, 5.1.2)
5.1.2
25/06/2020
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.