Extension WordPress
Vulnérabilités PilotPress
Cette page rassemble les failles publiées pour PilotPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de PilotPress
3 fiches
PilotPress <= 2.0.36 – Authenticated (Contributor+) Stored Cross-Site Scripting
The PilotPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.36 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-2.0.36
Non indiqué
22/09/2025
PilotPress <= 2.0.36 – Missing Authorization
The PilotPress plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.0.36. This makes it possible for authenticated attackers, with subscriber-level access and above,…
*-2.0.36
Non indiqué
22/09/2025
PilotPress <= 2.0.30 – Authenticated(Subscriber+) Missing Authorization via multiple AJAX functions
The PilotPress plugin for WordPress is vulnerable to unauthorized access to data and loss of data due to a missing capability check on multiple AJAX functions in all versions up to, and including, 2.0.30. This makes it possible…
*-2.0.30
2.0.31
31/01/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.