Extension WordPress
Vulnérabilités Malware Scanner
Cette page rassemble les failles publiées pour Malware Scanner, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Malware Scanner
4 fiches
Malware Scanner <= 4.7.2 and Web Application Firewall <= 2.1.1 – Unauthenticated Privilege Escalation
The Malware Scanner plugin and the Web Application Firewall plugin for WordPress (both by MiniOrange) are vulnerable to privilege escalation due to a missing capability check on the mo_wpns_init() function in all versions up to, and including, 4.7.2…
*-4.7.2
4.7.3
13/03/2024
Malware Scanner <= 4.7.2 – Authenticated (Administrator+) SQL Injection
The Malware Scanner plugin for WordPress is vulnerable to SQL Injection via an unknown parameter in all versions up to, and including, 4.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on…
*-4.7.2
4.7.3
12/02/2024
Malware Scanner <= 4.7.1 – IP Spoofing
The Malware Scanner plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 4.7.1 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for IP…
*-4.7.1
4.7.2
29/12/2023
miniOrange’s Malware Scanner <= 4.5.5 – Cross-Site Scripting
The Malware Scanner WordPress plugin before 4.5.2 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for…
*-4.5.1
4.5.2
06/06/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.