Extension WordPress
Vulnérabilités Restricted Site Access
Cette page rassemble les failles publiées pour Restricted Site Access, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Restricted Site Access
5 fiches
Restricted Site Access <= 7.4.1 – IP Spoofing to Protection Mechanism Bypass
The Restricted Site Access plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 6.3.0. This is due to insufficient restrictions on where the IP Address information is being retrieved for user IP…
*-7.4.1
7.5.0
27/11/2023
webpack JS package <= 5.75.0 – Sandbox Bypass
The JS package webpack is vulnerable to Sandbox Bypass in versions up to, and including, 5.75.0 due to mishandling magic comments. Some WordPress plugins and themes use this dependency, however, are not vulnerable to exploitation.
*-7.3.5
7.4.0
11/04/2023
loader-utils (JS package) < 3.2.1 – Regular Expression Denial of Service
The package loader-utils before 1.4.2, from 2.0.0 and before 2.0.4 as well as versions from 3.0.0 but below 3.2.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the resourcePath variable due to insecure usage of regular…
*-7.3.4
7.3.5
11/10/2022
loader-utils (JS package) < 3.2.1 – Regular Expression Denial of Service
The package loader-utils before 1.4.2, from 2.0.0 and before 2.0.4 as well as versions from 3.0.0 but below 3.2.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the interpolateName function due to insecure usage of regular…
*-7.3.4
7.3.5
11/10/2022
Restricted Site Access <= 7.3.1 – Access Bypass via IP Spoofing
The Restricted Site Access plugin for WordPress is vulnerable to IP Spoofing in versions up to, and including, 7.3.1 due to prioritizing getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR. This makes it possible to…
[*, 7.3.2)
7.3.2
31/08/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.