Extension WordPress
Vulnérabilités PrettyPhoto – Simple Lightbox Plugin
Cette page rassemble les failles publiées pour PrettyPhoto – Simple Lightbox Plugin, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de PrettyPhoto – Simple Lightbox Plugin
3 fiches
prettyPhoto <= 1.2.4 – Authenticated (Contributor+) Stored Cross-Site Scripting
The prettyPhoto plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-1.2.4
Non indiqué
05/09/2025
WordPress prettyPhoto <= 1.2.3 – Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
The WordPress prettyPhoto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-1.2.3
1.2.4
05/06/2024
WordPress prettyPhoto <= 1.1 – DOM Cross-Site Scripting
The prettyPhoto plugin for WordPress is vulnerable to DOM Cross-Site Scripting in versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that…
*-1.1
1.2
05/05/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.