Extension WordPress
Vulnérabilités Penci Shortcodes & Performance
Cette page rassemble les failles publiées pour Penci Shortcodes & Performance, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Penci Shortcodes & Performance
2 fiches
Penci Shortcodes & Performance <= 6.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Penci Shortcodes & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-6.1
6.2
11/01/2026
Penci Shortcodes & Performance < 6.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Penci Shortcodes & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to 6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and…
[*, 6.1)
6.1
22/09/2025
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.