Extension WordPress
Vulnérabilités WDContactFormBuilder
Cette page rassemble les failles publiées pour WDContactFormBuilder, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WDContactFormBuilder
3 fiches
WDContactFormBuilder <= 1.0.72 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The WDContactFormBuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Contact_Form_Builder' shortcode in versions up to, and including, 1.0.72 due to insufficient input sanitization and output escaping on 'id' user supplied attribute. This makes it…
*-1.0.72
Non indiqué
23/10/2023
WDContactFormBuilder <= 1.0.68 – Cross-Site Request Forgery
The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a discrepancy between the $_POST['action'] value and the $_GET['action']…
[*, 1.0.69)
1.0.69
23/04/2019
WDContactFormBuilder <= 1.0.24 – Authenticated Blind SQL Injection
The Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'order_by' parameter in versions up to, and including, 1.0.24 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation…
*-1.0.24
1.0.25
07/07/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.