Extension WordPress
Vulnérabilités Music Store – WordPress eCommerce
Cette page rassemble les failles publiées pour Music Store – WordPress eCommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Music Store – WordPress eCommerce
4 fiches
Music Store – WordPress eCommerce <= 1.1.19 – Reflected Cross-Site Scripting
The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.1.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
*-1.1.19
1.2.0
30/12/2024
Music Store – WordPress eCommerce <= 1.1.13 – Authenticated (Admin+) SQL Injection
The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.1.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…
*-1.1.13
1.1.14
10/06/2024
Music Store <= 1.0.41 – Cross-Site Scripting
The music-store plugin before 1.0.43 for WordPress has XSS via the wp-admin/admin.php?page=music-store-menu-reports from_year parameter.
*-1.0.41
1.0.43
28/03/2016
Music Store – WordPress eCommerce < 1.0.15 – Open Redirect
An open redirect in the Music Store – WordPress eCommerce plugin before 1.0.15 for WordPress allows attackers to redirect a user by adding HTTP referer to ms-core/ms-submit.php.
[*, 1.0.15)
1.0.15
25/07/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.