Extension WordPress

Vulnérabilités FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor

Cette page rassemble les failles publiées pour FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
0Critiques
2Avec correctif
6,4CVSS maximal

Historique de sécurité

CVE et vulnérabilités de FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor

3 fiches

CVE-2025-31875 Moyenne · 6,4
FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor

FancyPost <= 6.0.1 – Authenticated (Contributor+) Stored Cross-Site Scripting

The FancyPost plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…

Versions affectées

*-6.0.1

Correctif

Non indiqué

Publication

01/04/2025

CVE-2024-10536 Moyenne · 4,3
FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor

FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor <= 6.0.0 – Missing Authorization to Authenticated (Subscriber+) Shortcode Export

The FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_block_shortcode_export() function in all…

Versions affectées

*-6.0.0

Correctif

6.0.1

Publication

06/01/2025

CVE-2024-38686 Moyenne · 6,4
FancyPost – Post Blocks, Grids & Sliders for Block Editor and Elementor

FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor <= 5.3.1 – Authenticated (Author+) Stored Cross-Site Scripting

The FancyPost – Best Ultimate Post Block, Post Grid, Layouts, Carousel, Slider For Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.3.1 due to insufficient input sanitization and…

Versions affectées

*-5.3.1

Correctif

5.3.2

Publication

10/07/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités