Extension WordPress
Vulnérabilités Event Registration
Cette page rassemble les failles publiées pour Event Registration, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Event Registration
4 fiches
Event Registration <= 6.02.02 – Unauthenticated Stored Cross-Site Scripting
The Event Registration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via attendees first and last name parameters in versions up to, and including, 6.02.02 due to insufficient input sanitization and output escaping. This makes it possible…
*-6.02.02
6.03.01
09/05/2016
Event Registration <= 6.02.02 – SQL Injection
The Event Registration plugin for WordPress is vulnerable to generic SQL Injection via the ‘submitted_token’ and ‘qanda’ parameters in versions up to, and including, 6.02.02 due to insufficient escaping on the user supplied parameter and lack of sufficient…
*-6.02.02
6.03.01
09/05/2016
Event Registration <= 6.02.02 – PHP Object Injection
The Event Registration plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 6.02.02 via deserialization of untrusted input from the 'reg_form' or 'questions' parameter. This allows unauthenticated attackers to inject a PHP…
*-6.02.02
6.03.01
09/05/2016
Event Registration < 6.00.03 – SQL Injection
SQL injection vulnerability in the Event Registration plugin 5.32 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the event_id parameter in a register action.
[*, 6.00.03)
6.00.03
15/11/2010
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.