Extension WordPress
Vulnérabilités WORDPRESS VIDEO GALLERY
Cette page rassemble les failles publiées pour WORDPRESS VIDEO GALLERY, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WORDPRESS VIDEO GALLERY
6 fiches
WORDPRESS VIDEO GALLERY <= 2.8 – SQL Injection
The WORDPRESS VIDEO GALLERY Plugin for WordPress is vulnerable to SQL Injection via the ‘vid' parameter in versions up to, and including, 2.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on…
*-2.8
2.8.1
13/04/2015
WORDPRESS VIDEO GALLERY <= 3.0 – Improper Access Control
The WORDPRESS VIDEO GALLERY plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'email' ajax action in versions up to, and including, 3.0. This makes it possible for unauthorized attackers to…
*
Non indiqué
05/04/2015
Wordpress Video Gallery <= 2.7 – SQL Injection
SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php.
[*, 2.8)
2.8
12/02/2015
WORDPRESS VIDEO GALLERY < 2.6 – SQL Injection
Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly as distributed before 2014-07-23, for WordPress allow (1) remote attackers to execute arbitrary SQL commands via the vid parameter in a myextract action to…
[*, 2.6)
2.6
24/07/2014
WORDPRESS VIDEO GALLERY <= 2.5 – Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to (1) videoads/videoads.php, (2)…
*-2.5
2.6
24/07/2014
WordPress Video Gallery < 2.1 – SQL Injection
SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php.
[*, 2.1)
2.1
14/05/2013
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.