Extension WordPress
Vulnérabilités Helpful
Cette page rassemble les failles publiées pour Helpful, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Helpful
3 fiches
Helpful <= 4.5.25 – Sensitive Information Disclosure
The Helpful plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 4.5.25. Specifically, feedback and logs are stored in predictable locations with guessable file names. This could allow unauthenticated attackers to extract…
*-4.5.25
4.5.26
26/09/2022
Helpful <= 4.5.14 – Authorization Bypass to Repeat Voting
The Helpful plugin for WordPress is vulnerable to repeat voting in versions up to, and including, 4.5.14 due to insufficient voting verification/authorization. This makes it possible for authenticated attackers to vote more than once in polls created with…
*-4.5.14
4.5.15
16/08/2022
Helpful <= 4.4.58 – Admin+ Stored Cross-Site Scripting
The Helpful WordPress plugin before 4.4.59 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
[*, 4.4.59)
4.4.59
18/10/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.