Extension WordPress
Vulnérabilités Staff Directory Plugin: Company Directory
Cette page rassemble les failles publiées pour Staff Directory Plugin: Company Directory, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Staff Directory Plugin: Company Directory
3 fiches
Company Directory <= 4.3 – Reflected Cross-Site Scripting via add_query_arg Function
The Staff Directory Plugin: Company Directory plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 4.3. This makes it…
*-4.3
Non indiqué
04/03/2025
Staff Directory Plugin: Company Directory <= 4.3 – Unauthenticated Stored Cross-Site Scripting
The Staff Directory Plugin: Company Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
*-4.3
Non indiqué
02/02/2025
Staff Directory Plugin <= 3.6 – Cross-Site Request Forgery Bypass
The Staff Directory Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6. This is due to missing or incorrect nonce validation on the saveCustomFields() function. This makes it possible for…
*-3.6
4.0
21/06/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.