Extension WordPress
Vulnérabilités WordPress Landing Page – Squeeze Page – Responsive Landing Page Builder Free – WP Lead Plus X
Cette page rassemble les failles publiées pour WordPress Landing Page – Squeeze Page – Responsive Landing Page Builder Free – WP Lead Plus X, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WordPress Landing Page – Squeeze Page – Responsive Landing Page Builder Free – WP Lead Plus X
3 fiches
WP Lead Plus X <= 0.99 – Cross-Site Request Forgery
The WP Lead Plus X plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.99. This is due to missing or incorrect nonce validation on several functions. This makes it possible for…
*-0.99
Non indiqué
07/04/2020
WP Lead Plus X <= 0.98 – Stored Cross-Site Scripting
An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page templates containing arbitrary JavaScript via the c37_wpl_import_template admin-post action (which will execute in an administrator's browser if the…
*-0.98
0.99
07/04/2020
WordPress Landing Page – Squeeze Page – Responsive Landing Page Builder Free – WP Lead Plus X <= 0.98 – Authenticated Stored Cross-Site Scripting
An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permissions to create or replace existing pages with a malicious page containing arbitrary JavaScript via the wp_ajax_core37_lp_save_page (aka core37_lp_save_page)…
[*, 0.99)
0.99
07/04/2020
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.