Extension WordPress
Vulnérabilités WP REST API (WP API)
Cette page rassemble les failles publiées pour WP REST API (WP API), leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP REST API (WP API)
3 fiches
WP REST API <= 1.2.2 – Cross-Site Scripting
The WP REST API plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
*-1.2.2
1.2.3
14/08/2015
WP REST API (WP API) < 1.2.1 – Sensitive Information Disclosure
The WP REST API (WP API) plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 1.2. This could allow attackers to extract sensitive user or configuration data.
[*, 1.2.1)
1.2.1
09/04/2015
JSON REST API <= 1.1 – Potential Cross-Site Request Forgery Bypass
The JSON REST API plugin for WordPress is possibly vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1 due to a potential SOP bypass. This is due to missing or incorrect nonce validation. This makes…
*-1.1
1.1.1
10/07/2014
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.