Extension WordPress
Vulnérabilités If-So Dynamic Content – Elementor & All Page Builders Personalization
Cette page rassemble les failles publiées pour If-So Dynamic Content – Elementor & All Page Builders Personalization, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de If-So Dynamic Content – Elementor & All Page Builders Personalization
8 fiches
If-So Dynamic Content Personalization <= 1.9.4 – Authenticated (Contributor+) Stored Cross-Site Scripting
The If-So Dynamic Content Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-1.9.4
1.9.4.1
03/09/2025
If-So Dynamic Content Personalization <= 1.9.3.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The If-So Dynamic Content Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.9.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-1.9.3.1
1.9.3.2
12/06/2025
If-So Dynamic Content Personalization <= 1.9.2.1 – Authenticated (Contributor+) Post Disclosure
The If-So Dynamic Content Personalization plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.2.1 via the 'ifso-show-post' shortcode due to insufficient restrictions on which posts can be included. This makes it…
*-1.9.2.1
1.9.2.2
20/11/2024
If-So Dynamic Content Personalization <= 1.8.0.3 – Authenticated (Admin+) Stored Cross-Site Scripting
The If-So Dynamic Content Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via "Geolocation License" in all versions up to, and including, 1.8.0.3 due to insufficient input sanitization and output escaping. This makes it possible for…
*-1.8.0.3
1.8.0.4
22/06/2024
If-So Dynamic Content Personalization <= 1.8.0.3 – Reflected Cross-Site Scripting
The If-So Dynamic Content Personalization plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via '$_SERVER['REQUEST_URI']' in all versions up to, and including, 1.8.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
*-1.8.0.3
1.8.0.4
22/06/2024
If-So Dynamic Content Personalization <= 1.8.0.2 – Authenticated (Contributor+) Stored Cross-Site Scripting
The If-So Dynamic Content Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ifso-redirect' shortcode in all versions up to, and including, 1.8.0.2 due to insufficient input sanitization and output escaping on user supplied…
*-1.8.0.2
1.8.0.3
10/05/2024
If-So Dynamic Content Personalization <= 1.7.1 – Missing Authorization
The If-So Dynamic Content Personalization plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the edd_ifso_clear_license() function in versions up to, and including, 1.7.1. This makes it possible for unauthenticated…
*-1.7.1
1.7.1.1
09/05/2024
If-So Dynamic Content Personalization <= 1.6.3.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The If-So Dynamic Content Personalization plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.6.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-1.6.3.1
1.7
27/12/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.