Extension WordPress
Vulnérabilités Side Menu Lite – Sticky Floating Side Menu
Cette page rassemble les failles publiées pour Side Menu Lite – Sticky Floating Side Menu, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Side Menu Lite – Sticky Floating Side Menu
6 fiches
Side Menu Lite <= 5.3.1 – Cross-Site Request Forgery to Settings Update
The Side Menu Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.3.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated…
*-5.3.1
5.3.2
24/01/2025
Side Menu Lite – add sticky fixed buttons <= 4.2 – Cross-Site Request Forgery
The Side Menu Lite – add sticky fixed buttons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2. This is due to missing or incorrect nonce validation on the side-menu-lite…
*-4.2
4.2.1
11/04/2024
Multiple Wow-Company Plugins (Various Versions) — Reflected Cross-Site Scripting via 'page' parameter
Several plugins by Wow-Company are vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in…
*-4.0.1
4.0.2
22/05/2023
Side Menu Lite <= 4.0 – Cross-Site Request Forgery to Item Deletion
The Side Menu Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0. This is due to missing or incorrect nonce validation in the 'admin/page-main.php' file. This makes it possible for…
*-4.0
4.0.1
08/03/2023
Side Menu Lite – add sticky fixed buttons < 2.2.6 – SQL Injection
The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in SQL statement, leading to a SQL Injection issue.
[*, 2.2.6)
2.2.6
27/07/2021
Side Menu Lite <= 2.2 – SQL Injection
The Side Menu Lite – add sticky fixed buttons WordPress plugin before 2.2.1 does not properly sanitize input values from the browser when building an SQL statement. Users with the administrator role or permission to manage this plugin…
*-2.1.1
2.2.1
28/06/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.