Extension WordPress
Vulnérabilités Flexi – Guest Submit
Cette page rassemble les failles publiées pour Flexi – Guest Submit, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Flexi – Guest Submit
3 fiches
Flexi <= 4.28 – Authenticated (Contributor+) Stored Cross-Site Scripting via flexi-form-tag Shortcode
The Flexi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin for WordPress's flexi-form-tag shortcode in all versions up to, and including, 4.28 due to insufficient input sanitization and output escaping on user supplied attributes.…
*-4.28
Non indiqué
03/10/2025
Flexi – Guest Submit <= 4.28 – Unauthenticated Local File Inclusion
The Flexi – Guest Submit plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.28. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing…
*-4.28
Non indiqué
09/04/2025
Flexi – Guest Submit < 4.20 – Reflected Cross-Site Scripting
The Flexi – Guest Submit WordPress plugin before 4.20 does not sanitise and escape various parameters before outputting them back in some pages such as the user dashboard, leading to a Reflected Cross-Site Scripting.
[*, 4.20)
4.20
16/02/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.