Extension WordPress
Vulnérabilités Responsive Menu – Create Mobile-Friendly Menu
Cette page rassemble les failles publiées pour Responsive Menu – Create Mobile-Friendly Menu, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Responsive Menu – Create Mobile-Friendly Menu
5 fiches
Responsive Menu <= 4.1.7 – Missing Authorization Checks
The Responsive Menu plugin for WordPress is vulnerable to authorization bypass due to missing authorization checks on various functions and nonce disclosure in versions up to, and including 4.1.7. This makes it possible for attackers to upload arbitrary…
[*, 4.1.8)
4.1.8
16/03/2022
Responsive Menu 4.0 – 4.0.3 – Authenticated Arbitrary File Upload
In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the /rmp-menu/ directory. These files could then be accessed via the front end…
[4.0, 4.0.4)
4.0.4
10/02/2021
Responsive Menu <= 4.0.3 – Cross-Site Request Forgery to Arbitrary File Upload
In the Responsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive containing malicious PHP files. The attacker could then access those files to achieve…
[*, 4.0.4)
4.0.4
10/02/2021
Responsive Menu <= 4.0.3 – Cross-Site Request Forgery to Setting Modification
In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into importing all new settings. These settings could be modified to include malicious JavaScript, therefore allowing an attacker…
[*, 4.0.4)
4.0.4
10/02/2021
Responsive Menu <= 3.1.3 – Cross-Site Request Forgery
The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface.
[*, 3.1.4)
3.1.4
12/07/2020
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.