Extension WordPress
Vulnérabilités Logo Carousel – Responsive Logo Slider, Logo Showcase, and Clients Logo Gallery
Cette page rassemble les failles publiées pour Logo Carousel – Responsive Logo Slider, Logo Showcase, and Clients Logo Gallery, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Logo Carousel – Responsive Logo Slider, Logo Showcase, and Clients Logo Gallery
2 fiches
Logo Carousel <= 3.4.1 – Contributor+ Stored Cross-Site Scripting
The Logo Carousel WordPress plugin before 3.4.2 does not validate and escape the "Logo Margin" carousel option, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks
*-3.4.1
3.4.2
22/11/2021
Logo Carousel <= 3.4.1 – Unauthorised Private Post Access
The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to duplicate and view arbitrary private posts made by other users via the Carousel Duplication feature
*-3.4.1
3.4.2
22/11/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.