Extension WordPress
Vulnérabilités MP3-jPlayer
Cette page rassemble les failles publiées pour MP3-jPlayer, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de MP3-jPlayer
4 fiches
MP3 jPlayer <= 2.7.3 – Cross-Site Request Forgery
The MP3 jPlayer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.3. This is due to missing or incorrect nonce validation on several of its functions. This makes it possible for…
*-2.7.3
Non indiqué
01/09/2022
MP3-jPlayer <= 2.4.2 – Full Path Disclosure
The MP3-jPlayer plugin for WordPress is vulnerable to Path Disclosure in versions before 2.5.
[*, 2.5)
2.5
12/07/2015
MP3-jPlayer <= 1.8.11 – Cross-Site Scripting
The MP3-jPlayer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘mp3’ parameter in versions up to, and including, 1.8.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
*-1.8.11
1.8.12
05/01/2015
MP3-jPlayer < 1.8.8 – Cross-Site Scripting
The MP3-jPlayer plugin for WordPress is vulnerable to Cross-Site Scripting via several parameters in versions before 1.8.8 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute…
[*, 1.8.8)
1.8.8
23/02/2014
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.