Extension WordPress
Vulnérabilités HT Builder – WordPress Theme Builder for Elementor
Cette page rassemble les failles publiées pour HT Builder – WordPress Theme Builder for Elementor, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de HT Builder – WordPress Theme Builder for Elementor
2 fiches
HT Builder – WordPress Theme Builder for Elementor <= 1.3.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
The HT Builder – WordPress Theme Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for…
*-1.3.0
1.3.1
01/11/2024
HT Builder <= 1.2.9 – Cross-Site Request Forgery via plugin_activation
The HT Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.9. This is due to missing nonce validation on the plugin_activation() function. This makes it possible for unauthenticated attackers to…
*-1.2.9
1.3.0
03/04/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.