Extension WordPress
Vulnérabilités Block for Apple Maps
Cette page rassemble les failles publiées pour Block for Apple Maps, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Block for Apple Maps
6 fiches
simple-git < 3.16.0 – Remote Code Execution
The package simple-git is vulnerable to Remote Code Execution in versions before 3.16.0 via the clone(), pull(), push() and listRemote() methods due to improper input sanitization. This is due to an incomplete fix of CVE-2022-25912. WordPress plugins and…
*-1.1.0
1.1.1
23/02/2023
json5 <= 1.0.1 and 2.0.0-2.2.1 – Prototype Pollution
The package json5 before 1.0.2 and between 2.0.0 and 2.2.1 inclusive is vulnerable to prototype pollution due to failure to restrict parsing of keys named `__proto__`. As this package is used in some WordPress plugins, this could result…
*-1.0.3
1.1.0
23/12/2022
simple-git < 3.15.0 – Remote Code Execution
The package simple-git is vulnerable to Remote Code Execution in versions before 3.15.0 when the ext transport protocol is enabled. This makes the vulnerability exploitable using the clone method. WordPress plugins and themes may be using this package,…
*-1.0.3
1.1.0
05/12/2022
loader-utils (JS package) < 2.0.3 – Prototype Pollution
The package loader-utils before 1.4.1, from 2.0.0 and before 2.0.3 is vulnerable to prototype pollution via the function parseQuery which could make injecting malicious web scripts possible in some cases.
*-1.0.3
1.1.0
12/10/2022
Terser < 4.8.1 and 5.0.0-5.14.1 – Regular Expression Denial of Service
The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions. As this package is used in some WordPress plugins, this could result…
*-1.0.3
1.1.0
15/07/2022
markdown-it < 1.3.2 – Uncontrolled Resource Consumption
The package markdown-it 1.3.2 is vulnerable to Uncontrolled Resource Consumption in cases where special patterns with length greater than 50 thousand characters are used. As this package is used in some WordPress plugins, this could result in the…
1.0.3
1.1.0
10/01/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.