Extension WordPress
Vulnérabilités GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets
Cette page rassemble les failles publiées pour GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets
6 fiches
WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout <= 1.8.8 – Authenticated (Contributor+) Stored Cross-Site Scripting
The WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gs_pin_widget' shortcode in all versions up to, and including, 1.8.8 due to…
*-1.8.8
1.8.9
02/12/2024
GS Pins for Pinterest <= 1.8.2 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shorcode
The WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 1.8.2 due to insufficient…
*-1.8.2
1.8.3
25/03/2024
GS Pins for Pinterest Lite <= 1.8.0 – Missing Authorization via _update_shortcode
The WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and a misconfigured nonce check on the _update_shortcode…
[*, 1.8.1)
1.8.1
21/11/2023
WordPress Pinterest Plugin <= 1.6.1 – Stored (Contributor+) Cross-Site Scripting via Shortcode
The WordPress Pinterest Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gs_pinterest' shortcode in versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…
*-1.6.1
1.6.2
22/03/2023
Appsero <= 1.2.1 – Missing Authorization
The Appsero analytics tool used in several plugins is vulnerable to authorization bypass due to a missing capability check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.1. This makes it possible…
*-1.6.2
1.6.3
16/12/2022
Appsero <= 1.2.0 – Cross-Site Request Forgery
The Appsero analytics tool used in several plugins is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.0. This makes it…
*-1.6.2
1.6.3
14/12/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.