Extension WordPress
Vulnérabilités Responsive Starter Templates – Elementor Templates & Starter Sites
Cette page rassemble les failles publiées pour Responsive Starter Templates – Elementor Templates & Starter Sites, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Responsive Starter Templates – Elementor Templates & Starter Sites
9 fiches
Responsive Plus – Elementor Templates & Starter Sites < 3.4.3 – Unauthenticated Arbitrary Code Execution
The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Remote Code Execution in all versions up to 3.4.3 (exclusive). This makes it possible for unauthenticated attackers to execute code on the server.
[*, 3.4.3)
3.4.3
30/03/2026
Responsive Plus <= 3.2.2 – Cross-Site Request Forgery to Settings Update
The Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme. plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.2. This is due to missing or incorrect…
*-3.2.2
3.2.3
12/06/2025
Responsive Plus <= 3.2.0 – Missing Authorization
The Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme. plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the import_sites() function in all versions up to, and…
*-3.2.0
3.2.1
29/05/2025
Gutenberg & Elementor Templates Importer For Responsive <= 3.1.9 – Missing Authorization
The Gutenberg & Elementor Templates Importer For Responsive plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the create_items function in versions up to, and including, 3.1.9. This makes it possible for…
*-3.1.9
3.2.0
07/05/2025
Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme <= 3.1.4 – Authenticated (Contributor+) Blind Server-Side Request Forgery via remote_request
The Responsive Plus – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.1.4 via the 'remote_request' function. This makes it…
*-3.1.4
3.1.5
14/02/2025
Responsive Addons – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme. <= 3.0.5 – Authenticated (Author+) Stored Cross-Site Scripting
The Responsive Addons – Starter Templates, Advanced Features and Customizer Settings for Responsive Theme. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file uploader in all versions up to, and including, 3.0.5 due to…
*-3.0.5
3.0.6
04/06/2024
Responsive Starter Templates – Elementor & WordPress Templates <= 2.6.8 – Authenticated (Admin+) Stored Cross-Site Scripting
The Responsive Starter Templates – Elementor & WordPress Templates is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6.8. This allows authenticated users with administrator-level permissions to inject arbitrary web scripts in pages that will…
*-2.6.8
2.6.9
13/12/2022
Responsive Starter Templates – Elementor & WordPress Templates <= 2.6.8 – Authenticated (Admin+) Stored Cross-Site Scripting
The Responsive Starter Templates – Elementor & WordPress Templates plugin for WordPress is vulnerable to stored cross-site scripting in versions up to, and including, 2.6.8. This allows authenticated users with Administrator-level permissions or above to inject arbitrary web…
*-2.6.8
2.6.9
13/12/2022
Responsive Ready Sites Importer <= 2.2.6 – Unprotected AJAX Actions
The Responsive Ready Sites Importer for WordPress is vulnerable to authorization bypass due missing capability checks on several AJAX actions in versions up to, and including, 2.2.6. This makes it possible for authenticated attackers with minimal permissions, such…
[*, 2.2.6)
2.2.7
04/03/2020
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.