Extension WordPress
Vulnérabilités MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet
Cette page rassemble les failles publiées pour MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet
5 fiches
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet <= 3.2.0 – Cross-Site Request Forgery to Settings Reset
The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.0. This is due to missing or incorrect nonce validation on…
*-3.2.0
3.2.1
27/06/2025
MicroPayments <= 2.9.29 – Authenticated (Contributor+) Stored Cross-Site Scripting
The MicroPayments plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.9.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-2.9.29
2.9.30
28/03/2025
MicroPayments <= 3.2.4 – Reflected Cross-Site Scripting
The MicroPayments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…
*-3.2.4
3.2.5
12/03/2025
MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet <= 2.9.29 – Authenticated (Contributor+) Stored Cross-Site Scripting
The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Tokens Wallet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_content_upload_guest' shortcode in all versions up to, and including, 2.9.29 due to insufficient input…
*-2.9.29
2.9.30
17/01/2025
MicroPayments – Paid Author Subscriptions, Content, Downloads, Membership <= 1.9.5 – Cross-Site Request Forgery
MicroPayments – Paid Author Subscriptions, Content, Downloads, Membership versions prior to 1.9.6 are vulnerable to Cross-site request forgery. This allows a remote unauthenticated attacker to hijack the authentication of an administrator and perform unintended operation via unspecified vectors.
*-1.9.5
1.9.6
20/04/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.