Extension WordPress

Vulnérabilités ELEX WooCommerce Dynamic Pricing and Discounts

Cette page rassemble les failles publiées pour ELEX WooCommerce Dynamic Pricing and Discounts, leurs plages de versions affectées et les correctifs signalés dans la base locale.

4Vulnérabilités
0Critiques
4Avec correctif
6,5CVSS maximal

Historique de sécurité

CVE et vulnérabilités de ELEX WooCommerce Dynamic Pricing and Discounts

4 fiches

CVE-2024-12266 Moyenne · 6,5
ELEX WooCommerce Dynamic Pricing and Discounts

ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.7 – Missing Authorization

The ELEX WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the elex_dp_export_rules() and elex_dp_import_rules() functions in all versions up to, and including, 2.1.7. This…

Versions affectées

*-2.1.7

Correctif

2.1.8

Publication

23/12/2024

CVE-2024-32105 Moyenne · 5,3
ELEX WooCommerce Dynamic Pricing and Discounts

ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 – Cross-Site Request Forgery

The ELEX WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.2. This is due to missing or incorrect nonce validation on various function. This makes it…

Versions affectées

*-2.1.2

Correctif

2.1.3

Publication

11/04/2024

CVE-2024-31364 Moyenne · 4,3
ELEX WooCommerce Dynamic Pricing and Discounts

ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 – Cross-Site Request Forgery

The ELEX WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.2. This is due to missing or incorrect nonce validation on various function. This makes it…

Versions affectées

*-2.1.2

Correctif

2.1.3

Publication

08/04/2024

CVE-2024-31255 Moyenne · 6,1
ELEX WooCommerce Dynamic Pricing and Discounts

ELEX WooCommerce Dynamic Pricing and Discounts <= 2.1.2 – Reflected Cross-Site Scripting

The ELEX WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via an unknown parameter in all versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping. This makes…

Versions affectées

*-2.1.2

Correctif

2.1.3

Publication

05/04/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités