Extension WordPress
Vulnérabilités Real-Time Find and Replace
Cette page rassemble les failles publiées pour Real-Time Find and Replace, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Real-Time Find and Replace
2 fiches
Real-Time Find and Replace <= 3.9 – Cross-Site Request Forgery to Stored Cross-Site Scripting
An issue was discovered in the Real-Time Find and Replace plugin before 4.0.2 for WordPress. The far_options_page function did not do any nonce verification, allowing for requests to be forged on behalf of an administrator. The find and…
*-3.9
4.0.2
27/04/2020
Real-Time Find and Replace <= 3.8 – Cross-Site Scripting
The Real-Time Find and Replace plugin for WordPress is vulnerable to Cross-Site Scripting via the ‘REQUEST_URI’ parameter in versions before 3.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…
*-3.6
3.9
14/04/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.