Extension WordPress
Vulnérabilités SALERT – Fake Sales Notification WooCommerce
Cette page rassemble les failles publiées pour SALERT – Fake Sales Notification WooCommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de SALERT – Fake Sales Notification WooCommerce
2 fiches
SALERT <= 1.2.1 – Missing Authorization via salert_save_settings_with_ajax()
The SALERT plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the salert_save_settings_with_ajax() function called via an AJAX action in versions up to, and including, 1.2.1. This makes it possible…
*-1.2.1
1.2.2
09/05/2023
SALERT <= 1.2.1 – Authenticated (Subscriber+) Stored Cross-Site Scripting
The SALERT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level…
*-1.2.1
1.2.2
09/05/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.