Extension WordPress
Vulnérabilités Magical Posts Display – Elementor Advanced Posts widgets
Cette page rassemble les failles publiées pour Magical Posts Display – Elementor Advanced Posts widgets, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Magical Posts Display – Elementor Advanced Posts widgets
5 fiches
Magical Posts Display <= 1.2.54 – Authenticated (Author+) Stored Cross-Site Scripting via Magical Posts Accordion Widget
The Magical Posts Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpac_title_tag' parameter in the Magical Posts Accordion widget in all versions up to, and including, 1.2.54 due to insufficient input sanitization and output…
*-1.2.54
1.2.55
11/12/2025
Magical Posts Display <= 1.2.52 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Magical Posts Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.52 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access…
*-1.2.52
1.2.53
30/07/2025
Magical Posts Display – Elementor & Gutenberg Posts Blocks <= 1.2.38 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Magical Posts Display – Elementor & Gutenberg Posts Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.38 due to insufficient input sanitization and output escaping. This makes it possible…
*-1.2.38
1.2.39
10/07/2024
Appsero <= 1.2.1 – Missing Authorization
The Appsero analytics tool used in several plugins is vulnerable to authorization bypass due to a missing capability check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.1. This makes it possible…
*-1.2.15
1.2.16
16/12/2022
Appsero <= 1.2.0 – Cross-Site Request Forgery
The Appsero analytics tool used in several plugins is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.0. This makes it…
*-1.2.15
1.2.16
14/12/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.