Extension WordPress
Vulnérabilités Pricing Table WordPress Plugin – Easy Pricing Tables
Cette page rassemble les failles publiées pour Pricing Table WordPress Plugin – Easy Pricing Tables, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Pricing Table WordPress Plugin – Easy Pricing Tables
6 fiches
Pricing Tables WordPress Plugin – Easy Pricing Tables <= 3.2.6 – Authenticated (Contributor+) Stored Cross-Site Scripting via fontFamily Attribute
The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFamily’ attribute in all versions up to, and including, 3.2.6 due to insufficient input sanitization and output escaping.…
*-3.2.6
3.2.7
06/11/2024
Pricing Tables WordPress Plugin – Easy Pricing Tables <= 3.2.5 – Reflected Cross-Site Scripting
The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.2.5.…
*-3.2.5
3.2.6
29/10/2024
Easy Pricing Tables <= 3.2.2 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…
*-3.2.2
3.2.3
04/01/2023
Easy Pricing Tables <= 3.2.0 – Reflected Cross-Site Scripting
The Easy Pricing Tables plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the multiple parameters in versions up to, and including, 3.2.0 due to insufficient input sanitization and output escaping in the ptp_design4_color_columns() function. This makes…
*-3.2.0
3.2.1
03/06/2022
Easy Pricing Tables <= 3.1.2 – Author+ Stored Cross-Site Scripting
Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) vulnerability in Fatcat Apps Easy Pricing Tables plugin
*-3.1.2
3.1.3
27/05/2022
Easy Pricing Tables <= 3.1.2 – Arbitrary Post Removal via Cross-Site Request Forgery
The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to make a logged in admin remove arbitrary posts from the blog via a CSRF attack, which will…
*-3.1.2
3.1.3
01/02/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.