Extension WordPress
Vulnérabilités Collapse-O-Matic
Cette page rassemble les failles publiées pour Collapse-O-Matic, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Collapse-O-Matic
4 fiches
Collapse-O-Matic <= 1.8.5.8 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Collapse-O-Matic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'expand' and 'expandsub' shortcode in all versions up to, and including, 1.8.5.7 due to insufficient input sanitization and output escaping on user supplied attributes.…
*-1.8.5.8
Non indiqué
14/06/2024
Collapse-O-Matic <= 1.8.5.5 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Collapse-O-Matic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'expand' shortcode in all versions up to, and including, 1.8.5.5 due to insufficient input sanitization and output escaping on the 'tag' user supplied attribute.…
*-1.8.5.5
1.8.5.6
23/04/2024
Collapse-O-Matic <= 1.8.5.5 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Collapse-O-Matic plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.8.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-1.8.5.5
Non indiqué
22/08/2023
Collapse-O-Matic <= 1.8.2 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Collapse-O-Matic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 1.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible…
*-1.8.2
1.8.3
28/12/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.