Extension WordPress
Vulnérabilités Simple Podcasting
Cette page rassemble les failles publiées pour Simple Podcasting, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Simple Podcasting
5 fiches
simple-git < 3.16.0 – Remote Code Execution
The package simple-git is vulnerable to Remote Code Execution in versions before 3.16.0 via the clone(), pull(), push() and listRemote() methods due to improper input sanitization. This is due to an incomplete fix of CVE-2022-25912. WordPress plugins and…
*-1.4.0
1.5.0
23/02/2023
json5 <= 1.0.1 and 2.0.0-2.2.1 – Prototype Pollution
The package json5 before 1.0.2 and between 2.0.0 and 2.2.1 inclusive is vulnerable to prototype pollution due to failure to restrict parsing of keys named `__proto__`. As this package is used in some WordPress plugins, this could result…
*-1.3.0
1.4.0
23/12/2022
simple-git < 3.15.0 – Remote Code Execution
The package simple-git is vulnerable to Remote Code Execution in versions before 3.15.0 when the ext transport protocol is enabled. This makes the vulnerability exploitable using the clone method. WordPress plugins and themes may be using this package,…
*-1.3.0
1.4.0
05/12/2022
terser (JS Package) < 5.14.2 – Denial of Service
The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions. Some WordPress plugins and themes use this dependency, however, are not vulnerable…
[*, 1.2.4)
1.2.4
14/07/2022
got (JS Package) <= 11.8.4 and 12.0-<12.1.0 – Open Redirect
The got (JS Package) is vulnerable to Open Redirect in versions up to, and including, 11.8.4 as well as from 12 to below 12.1.0. Requested URLs are not verified and allow open redirection to a local UNIX socket.
*-1.2.4
1.3.0
19/06/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.