Extension WordPress
Vulnérabilités Header Footer Code Manager
Cette page rassemble les failles publiées pour Header Footer Code Manager, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Header Footer Code Manager
4 fiches
Header Footer Code Manager <= 1.1.34 – Cross-Site Request Forgery via process_bulk_action
The Header Footer Code Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.34. This is due to missing or incorrect nonce validation on the 'process_bulk_action function'. This makes it possible…
[*, 1.1.35)
1.1.35
04/07/2023
Header Footer Code Manager <= 1.1.23 – Cross-Site Scripting
The Header Footer Code Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters in versions up to, and including, 1.1.23 due to insufficient input sanitization and output escaping. This makes it possible for attackers…
*-1.1.23
1.1.24
25/06/2022
Header Footer Code Manager <= 1.1.16 – Reflected Cross-Site Scripting
The Header Footer Code Manager plugin
*-1.1.16
1.1.17
18/02/2022
Header Footer Code Manager <= 1.1.13 – Authenticated SQL Injections
The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections
[*, 1.1.14)
1.1.14
11/10/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.