Extension WordPress
Vulnérabilités Notibar – Notification Bar for WordPress
Cette page rassemble les failles publiées pour Notibar – Notification Bar for WordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Notibar – Notification Bar for WordPress
3 fiches
Notibar <= 2.1.5 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Notibar – Notification Bar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it…
*-2.1.5
2.1.6
05/03/2025
Notibar – Notification Bar for WordPress <= 2.1.4 – Authenticated (Subscriber+) Arbitrary Shortcode Execution via njt_nofi_text
The The Notibar – Notification Bar for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution via njt_nofi_text AJAX action in all versions up to, and including, 2.1.4. This is due to the software allowing users to…
*-2.1.4
2.1.5
12/12/2024
Notibar <= 2.1.4 – Missing Authorization via ajax_install_plugin
The Notibar plugin for WordPress is vulnerable to unauthorized plugin activation due to a missing capability check on the ajax_install_plugin() function in versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, with contributor-level access…
*-2.1.4
2.1.5
11/12/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.