Extension WordPress
Vulnérabilités include-file
Cette page rassemble les failles publiées pour include-file, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de include-file
2 fiches
include-file <= 1 – Authenticated (Contributor+) Arbitrary File Download
The include-file plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on…
*-1
Non indiqué
03/04/2025
include-file <= 1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The include-file plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-1
Non indiqué
24/03/2025
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.