Extension WordPress
Vulnérabilités Student Result or Employee Database
Cette page rassemble les failles publiées pour Student Result or Employee Database, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Student Result or Employee Database
3 fiches
Student Result or Employee Database <= 1.7.9 – Missing Authorization
The Student Results or Employee Database plugin for WordPress is vulnerable to unauthorized REST calls in versions up to, and including 1.7.9. This is due to flawed permission callback in the plugin's REST endpoints. This makes it possible…
*-1.7.9
1.8.0
01/08/2022
Student Result or Employee Database <= 1.7.4 – Cross-Site Request Forgery to Stored Cross-Site Scripting
The Student Result or Employee Database plugin for WordPress is vulnerable to Cross-Site Request Forgery on its ajax actions in versions up to, and including, 1.7.4 due to improper or missing nonce verification. This allows unauthenticated attackers to…
*-1.7.4
1.7.5
01/08/2022
Student Result or Employee Database <= 1.6.3 – Authentication Bypass
The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn_ssr_add_st_submit() function and fn_ssr_del_st_submit() function in functions.php only require knowing the student id number.
*-1.6.3
1.6.4
21/09/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.