Extension WordPress
Vulnérabilités iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
Cette page rassemble les failles publiées pour iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
4 fiches
iubenda <= 3.3.2 – Authenticated (Subscriber+) Privilege Escalation
The ubenda plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 3.3.2. This is due to missing verification in the 'process_actions' and 'ajax_save_options' functions (among numerous others). This makes it possible for subscriber-level…
*-3.3.2
3.3.3
12/12/2022
iubenda <= 3.3.2 – Cross-Site Request Forgery
The iubenda plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.2. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to…
*-3.3.2
3.3.3
06/12/2022
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.0.8 – Server-Side Request Forgery
The iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including 3.0.8. This makes it possible for attackers to send requests…
*-3.0.7
3.0.8
17/06/2022
iubenda < 2.3.5 – Failure to Restrict URL Protocol
The iubenda-cookie-law-solution plugin before 2.3.5 for WordPress does not restrict URL sanitization to http protocols.
*-2.3.4
2.3.5
12/05/2020
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.