Extension WordPress
Vulnérabilités Download Plugins and Themes in ZIP from Dashboard
Cette page rassemble les failles publiées pour Download Plugins and Themes in ZIP from Dashboard, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Download Plugins and Themes in ZIP from Dashboard
5 fiches
Download Plugins and Themes from Dashboard <= 1.9.6 – Cross-Site Request Forgery to Bulk Plugin/Theme Archival
The Download Plugins and Themes in ZIP from Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.6. This is due to missing or incorrect nonce validation on the download_plugin_bulk…
*-1.9.6
1.9.7
16/12/2025
Download Plugins and Themes in ZIP from Dashboard <= 1.9.1 – Reflected Cross-Site Scripting
The Download Plugins and Themes in ZIP from Dashboard plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.9.1.…
*-1.9.1
1.9.2
10/10/2024
Download Plugins and Themes from Dashboard <= 1.8.7 – Cross-Site Request Forgery
The Download Plugins and Themes in ZIP from Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.7. This is due to missing or incorrect nonce validation on the download_theme()…
*-1.8.7
1.8.8
15/08/2024
Download Plugins and Themes from Dashboard <= 1.8.5 – Authenticated (Admin+) Arbitrary File Download
The Download Plugins and Themes in ZIP from Dashboard plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.8.5 via the download_theme function. This makes it possible for unauthenticated attackers to read…
*-1.8.5
1.8.6
17/05/2024
Download Plugins and Themes from Dashboard <= 1.5.0 – Unauthenticated Stored Cross-Site Scripting
includes/settings/class-alg-download-plugins-settings.php in the download-plugins-dashboard plugin through 1.5.0 for WordPress has multiple unauthenticated stored XSS issues.
[*, 1.6.0)
1.6.0
02/10/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.