Extension WordPress
Vulnérabilités Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery, page 3
Cette page rassemble les failles publiées pour Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery
44 fiches
SWFUpload <= 2.2.0.1 – Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter,…
*-1.9.6
1.9.7
09/11/2012
NextGen Gallery <= 1.9.7 – Cross-Site Scripting
The NextGen Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via swfupload.swf in versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…
*-1.9.7
1.9.8
14/06/2012
WordPress Gallery Plugin – NextGEN Gallery <= 1.5.1 – Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in xml/media-rss.php in the NextGEN Gallery plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the mode parameter.
[*, 1.5.2)
1.5.2
06/04/2010
NextGEN Gallery Plugin <= 1.9.0 – Authenticated (Admin+) Stored Cross-Site Scripting
The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the description field for galleries in all versions up to, and including, 1.9.0 due to insufficient input sanitization…
*-1.9.0
1.9.1
07/06/2008
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.