Extension WordPress
Vulnérabilités FeedWordPress
Cette page rassemble les failles publiées pour FeedWordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de FeedWordPress
5 fiches
FeedWordPress <= 2022.0222 – Insecure Direct Object Referece
The FeedWordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2022.0222 due to missing validation on the user controlled 'guid' key. This makes it possible for unauthenticated attackers to…
*-2022.0222
2024.0428
04/03/2024
FeedWordPress <= 2021.0713 – Reflected Cross-Site Scripting
The FeedWordPress plugin before 2022.0123 is affected by a Reflected Cross-Site Scripting (XSS) within the "visibility" parameter.
*-2021.0713
2022.0123
18/01/2022
FeedWordPress < 2015.0514 – SQL Injection
SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the link_ids[] parameter in an Update action in the syndication.php page to wp-admin/admin.php.
[*, 2015.0514)
2015.0514
19/05/2015
FeedWordPress < 2015.0514 – Reflected Cross-Site Scripting
The feedwordpress plugin before 2015.0514 for WordPress has XSS via add_query_arg() and remove_query_arg().
[*, 2015.0514)
2015.0514
14/05/2015
FeedWordPress < 2015.0426 – Cross-Site Scripting
The FeedWordPress plugin for WordPress is vulnerable to Cross-Site Scripting via several parameters in versions before 2015.0426 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute…
*-2014.0805
2015.0426
26/04/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.