Extension WordPress
Vulnérabilités Crowdsignal Dashboard – Polls, Surveys & more
Cette page rassemble les failles publiées pour Crowdsignal Dashboard – Polls, Surveys & more, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Crowdsignal Dashboard – Polls, Surveys & more
9 fiches
Crowdsignal Dashboard – Polls, Surveys & more <= 3.1.3 – Cross-Site Request Forgery
The Crowdsignal Dashboard – Polls, Surveys & more plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1.3. This is due to missing or incorrect nonce validation on a function. This makes…
*-3.1.3
3.1.4
24/09/2024
Crowdsignal Dashboard – Polls, Surveys & more <= 3.0.11 – Cross-Site Request Forgery via update_rating
The Crowdsignal Dashboard – Polls, Surveys & more plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.11. This is due to missing or incorrect nonce validation on the update_rating function. This…
*-3.0.11
3.1.0
27/12/2023
Crowdsignal Dashboard – Polls, Surveys & more <= 3.0.11 – Reflected Cross-Site Scripting
The Crowdsignal Dashboard – Polls, Surveys & more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.0.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
*-3.0.11
3.1.0
27/12/2023
Crowdsignal Dashboard <= 3.0.9 – Authorization Bypass
The Crowdsignal Dashboard plugin for WordPress is vulnerable to Authorization Bypass in versions up to, and including, 3.0.9. This is due to missing authorization checks on the settings page that made it possible for contributor-level attackers to load…
*-3.0.9
3.0.10
17/11/2022
Crowdsignal Dashboard – Polls, Surveys & more <= 3.0.7 – Reflected Cross-Site Scripting
The Crowdsignal Dashboard – Polls, Surveys & more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mediaType' parameter in versions up to, and including, 3.0.7 due to insufficient input sanitization and output escaping. This makes…
*-3.0.7
3.0.8
18/07/2022
Crowdsignal Dashboard – Polls, Surveys & more <= 2.0.31 – Stored Cross-Site scripting
The Crowdsignal Dashboard – Polls, Surveys & more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via poll content in versions up to, and including, 2.0.31 due to insufficient input sanitization and output escaping. This makes it…
*-2.0.31
2.0.32
26/05/2016
Crowdsignal Dashboard <= 2.0.24 – Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Polldaddy Polls & Ratings plugin before 2.0.25 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to a ratings shortcode and a unique ID.
*-2.0.24
2.0.25
01/08/2014
Polldaddy Polls & Rating < 2.0.24 – Reflected Cross-Site Scripting
The Polldaddy Polls & Rating for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘polldaddy-ratings-title-filter’ parameter in versions up to, and including, 2.0.24 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
[*, 2.0.24)
2.0.24
01/08/2014
Crowdsignal Dashboard < 2.0.21 – Cross-Site Request Forgery
The Crowdsignal Dashboard – Polls, Surveys & more plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions before 2.0.21. This is due to missing or incorrect nonce validation in the rating_settings function. This makes it possible…
[*, 2.0.21)
2.0.21
06/11/2013
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.