Extension WordPress
Vulnérabilités QR Redirector
Cette page rassemble les failles publiées pour QR Redirector, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de QR Redirector
3 fiches
QR Redirector <= 2.0.3 – Missing Authorization
The QR Redirector plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.0.3. This makes it possible for authenticated attackers, with subscriber-level access and…
*-2.0.3
2.0.4
25/05/2026
QR Redirector < 1.6.1 – Stored Cross-Site Scripting
The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could allow users with a role as low as Contributor perform Stored Cross-Site Scripting attacks.
[*, 1.6.1)
1.6.1
18/10/2021
QR Redirector <= 1.5 – Cross-Site Request Forgery
The QR Redirector WordPress plugin before 1.6 does not have capability and CSRF checks when saving bulk QR Redirector settings via the qr_save_bulk AJAX action, which could allow any authenticated user, such as subscriber to change the redirect…
[*, 1.6)
1.6
18/10/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.