Extension WordPress

Vulnérabilités Kudos Donations: Easy Donations with Mollie | One-off & Recurring | PDF Receipts | Buttons & Forms

Cette page rassemble les failles publiées pour Kudos Donations: Easy Donations with Mollie | One-off & Recurring | PDF Receipts | Buttons & Forms, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
0Critiques
3Avec correctif
8,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Kudos Donations: Easy Donations with Mollie | One-off & Recurring | PDF Receipts | Buttons & Forms

3 fiches

CVE-2024-11684 Moyenne · 6,1
Kudos Donations: Easy Donations with Mollie | One-off & Recurring | PDF Receipts | Buttons & Forms

Kudos Donations – Easy donations and payments with Mollie <= 3.2.9 – Reflected Cross-Site Scripting

The Kudos Donations – Easy donations and payments with Mollie plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.2.9 due to insufficient input sanitization and output…

Versions affectées

*-3.2.9

Correctif

3.3.0

Publication

27/11/2024

CVE-2024-11685 Moyenne · 6,1
Kudos Donations: Easy Donations with Mollie | One-off & Recurring | PDF Receipts | Buttons & Forms

Kudos Donations – Easy donations and payments with Mollie <= 3.2.9 – Reflected Cross-Site Scripting via 'add_query_arg'

The `Kudos Donations – Easy donations and payments with Mollie` plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of `add_query_arg` without appropriate escaping on the URL in all versions up to, and including,…

Versions affectées

*-3.2.9

Correctif

3.3.0

Publication

27/11/2024

Vulnérabilité Élevée · 8,8
Kudos Donations: Easy Donations with Mollie | One-off & Recurring | PDF Receipts | Buttons & Forms

Kudos Donations – Easy donations and payments with Mollie < 3.1.2 – Cross-Site Request Forgery

The Kudos Donations – Easy donations and payments with Mollie plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions before 3.1.2. This is due to incorrect nonce validation on the several delete functions. This makes it…

Versions affectées

[*, 3.1.2)

Correctif

3.1.2

Publication

22/11/2021

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités