Extension WordPress
Vulnérabilités JW Player for Flash & HTML5 Video
Cette page rassemble les failles publiées pour JW Player for Flash & HTML5 Video, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de JW Player for Flash & HTML5 Video
2 fiches
JW-Player-Plugin-For-Wordpress <= 2.1.14 – Reflected Cross-Site Scripting
The JW-Player plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in versions up to, and including, 2.1.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject…
*-2.1.14
Non indiqué
21/11/2015
JW Player for Flash & HTML5 Video < 2.1.4 – Cross-Site Request Forgery leading to player deletion
The JW Player plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.3. This is due to missing or incorrect nonce validation on the player deletion functionality. This makes it possible for…
[*, 2.1.4)
2.1.4
10/06/2014
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.