Extension WordPress
Vulnérabilités Credova Financial
Cette page rassemble les failles publiées pour Credova Financial, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Credova Financial
3 fiches
Credova_Financial <= 2.5.0 – Cross-Site Request Forgery
The Credova Financial plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated…
*-2.5.0
2.5.1
07/05/2025
Credova_Financial <= 2.4.8 – Reflected Cross-Site Scripting
The Credova_Financial plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.4.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…
*-2.4.8
2.4.9
10/04/2025
Credova_Financial <= 1.4.8 – Sensitive Information Disclosure
The Credova_Financial WordPress plugin discloses a site's associated Credova API account username and password in plaintext via an AJAX action whenever a site user goes to checkout on a page that has the Credova Financing option enabled. This…
*-1.4.8
1.4.9
29/09/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.