Extension WordPress
Vulnérabilités Donations Made Easy – Smart Donations
Cette page rassemble les failles publiées pour Donations Made Easy – Smart Donations, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Donations Made Easy – Smart Donations
6 fiches
Donations Made Easy – Smart Donations <= 4.0.12 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Donations Made Easy – Smart Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 4.0.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-4.0.12
Non indiqué
07/11/2023
Donations Made Easy – Smart Donations <= 4.0.12 – Cross-Site Request Forgery
The Donations Made Easy – Smart Donations plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.12. This is due to missing or incorrect nonce validation on an unknown function. This makes…
*-4.0.12
Non indiqué
07/11/2023
Donations Made Easy – Smart Donations <= 4.0.12 – Unauthenticated Stored Cross-Site Scripting
The Donations Made Easy – Smart Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the rednao_smart_donations_save_form_values() function called via a nopriv AJAX in versions up to, and including, 4.0.12 due to insufficient input sanitization and…
*-4.0.12
Non indiqué
18/08/2023
Donations Made Easy – Smart Donations <= 4.0.12 – Authenticated (Administrator+) SQL Injection
The Donations Made Easy – Smart Donations plugin for WordPress is vulnerable to SQL Injection via an unknown parameter in versions up to, and including, 4.0.12 due to insufficient escaping on a user supplied parameter and lack of…
*-4.0.12
Non indiqué
11/08/2023
Donations Made Easy – Smart Donations <= 4.0.12 – Missing Authorization
The Donations Made Easy – Smart Donations plugin for WordPress is vulnerable to unauthorized actions due to a missing capability check on an unknown function in versions up to, and including, 4.0.12. This makes it possible for authenticated…
*-4.0.12
Non indiqué
24/07/2023
Donations Made Easy – Smart Donations <= 4.0.12 – Reflected Cross-Site Scripting
The Donations Made Easy – Smart Donations plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
*-4.0.12
Non indiqué
12/05/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.