Extension WordPress
Vulnérabilités Cool Author Box – For Widget and Post Content
Cette page rassemble les failles publiées pour Cool Author Box – For Widget and Post Content, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Cool Author Box – For Widget and Post Content
3 fiches
Cool Author Box <= 3.0.0 – Cross-Site Request Forgery
The Cool Author Box plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.0. This is due to missing or incorrect nonce validation on the hmcab_admin_settings() function. This makes it possible for…
*-3.0.0
3.0.1
07/05/2025
Cool Author Box <= 2.9.9 – Missing Authorization
The Cool Author Box – For Widget and Post Content plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.9.9. This makes it…
*-2.9.9
3.0.0
27/03/2025
Freemius SDK <= 2.5.9 – Reflected Cross-Site Scripting via fs_request_get
The Freemius SDK for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘fs_request_get’ function in versions up to, and including, 2.5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
*-2.9.4
2.9.5
18/07/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.