Extension WordPress

Vulnérabilités Project Management, Bug and Issue Tracking Plugin – Software Issue Manager

Cette page rassemble les failles publiées pour Project Management, Bug and Issue Tracking Plugin – Software Issue Manager, leurs plages de versions affectées et les correctifs signalés dans la base locale.

2Vulnérabilités
0Critiques
2Avec correctif
8,1CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Project Management, Bug and Issue Tracking Plugin – Software Issue Manager

2 fiches

CVE-2025-8314 Moyenne · 6,4
Project Management, Bug and Issue Tracking Plugin – Software Issue Manager

Software Issue Manager <= 5.0.1 – Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter

The Software Issue Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘noaccess_msg parameter in all versions up to, and including, 5.0.1 due to insufficient input sanitization and output escaping. This makes it possible for…

Versions affectées

*-5.0.0

Correctif

5.0.1

Publication

11/08/2025

CVE-2025-8420 Élevée · 8,1
Project Management, Bug and Issue Tracking Plugin – Software Issue Manager

Multiple Plugins by emarket-design <= Multiple Versions – Unauthenticated Limited Remote Code Execution

Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code Execution in various versions via the emd_form_builder_lite_pagenum function. This is due to the plugin not properly validating user input before using it as…

Versions affectées

*-5.0.0

Correctif

5.0.1

Publication

05/08/2025

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités