Extension WordPress

Vulnérabilités Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension

Cette page rassemble les failles publiées pour Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension, leurs plages de versions affectées et les correctifs signalés dans la base locale.

4Vulnérabilités
2Critiques
2Avec correctif
9,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension

4 fiches

CVE-2024-37121 Moyenne · 4,4
Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension

Shortcode Addons <= 3.2.5 – Authenticated (Administrator+) Stored Cross-Site Scripting

The Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.2.5 due to insufficient input sanitization and…

Versions affectées

*-3.2.5

Correctif

Non indiqué

Publication

20/06/2024

CVE-2024-31114 Critique · 9,1
Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension

Shortcode Addons <= 3.2.5 – Authenticated (Admin+) Arbitrary File Upload

The Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 3.2.5. This makes it…

Versions affectées

*-3.2.5

Correctif

Non indiqué

Publication

29/03/2024

CVE-2022-33970 Élevée · 7,2
Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension

Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension <= 3.1.2 – Authenticated Arbitrary Options Update

The "Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension" plugin for WordPress is vulnerable to arbitrary options update in versions up to, and including, 3.1.2. This makes it possible for authenticated attackers to modify arbitrary…

Versions affectées

*-3.1.2

Correctif

3.2.0

Publication

25/07/2022

CVE-2022-34487 Critique · 9,8
Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension

Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension <= 3.0.2 – Unauthenticated Arbitrary Options Update

The "Shortcode Addons- with Visual Composer, Divi, Beaver Builder and Elementor Extension" plugin for WordPress is vulnerable to arbitrary options update in versions up to, and including, 3.0.2. This is due to improperly configured capability checking via the…

Versions affectées

*-3.0.2

Correctif

3.0.3

Publication

30/06/2022

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités