Extension WordPress
Vulnérabilités MPL-Publisher , Ebook & Audiobook Creator
Cette page rassemble les failles publiées pour MPL-Publisher , Ebook & Audiobook Creator, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de MPL-Publisher , Ebook & Audiobook Creator
3 fiches
MPL-Publisher <= 2.18.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
The MPL-Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.18.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-2.18.0
2.18.1
22/04/2025
MPL-Publisher <= 1.30.2 – Authenticated (Admin+) Stored Cross-Site Scripting
The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/libs/PublisherController.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in…
*-1.30.2
1.30.3
15/10/2021
PHPRelativePath Library – Various Plugins (Various Versions) – Reflected Cross-Site Scripting
Multiple plugins for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘path’ parameter included in the PHPRelativePath Library due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
*-1.29.1
1.29.2
25/08/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.