Extension WordPress
Vulnérabilités PWA for WP – Progressive Web Apps Made Simple
Cette page rassemble les failles publiées pour PWA for WP – Progressive Web Apps Made Simple, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de PWA for WP – Progressive Web Apps Made Simple
5 fiches
PWA for WP & AMP <= 1.7.72 – Missing Authorization
The PWA for WP & AMP plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.7.72. This makes it possible for authenticated attackers,…
*-1.7.72
1.7.73
25/09/2024
PWA for WP – Progressive Web Apps Made Simple <= 1.7.71 – Authenticated (Admin+) Stored Cross-Site Scripting
The PWA for WP – Progressive Web Apps Made Simple plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.7.71 due to insufficient input sanitization and output escaping.…
*-1.7.71
1.7.72
20/08/2024
PWA for WP & AMP < = 1.7.32 – Missing Authorization
The PWA for WP & AMP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the pwaforwp_update_features_options function in versions up to, and including, 1.7.32. This makes it possible for authenticated attackers…
*-1.7.32
1.7.33
01/07/2021
PWA for WP & AMP <= 1.7.32 – Arbitrary File Upload
The PWA for WP & AMP for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pwaforwp_splashscreen_uploader function in versions up to, and including, 1.7.32. This makes it possible for authenticated attackers…
*-1.7.32
1.7.33
01/07/2021
PWA for WP & AMP Plugin <= 1.0.8 – Cross-Site Scripting
The PWA for WP & AMP plugin for WordPress is vulnerable to Cross-Site Scripting via several parameters in versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping. This makes it possible for attackers…
[*, 1.0.9)
1.0.9
25/03/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.