Extension WordPress
Vulnérabilités Store Locator Plus® for WordPress
Cette page rassemble les failles publiées pour Store Locator Plus® for WordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Store Locator Plus® for WordPress
5 fiches
Store Locator Plus <= 2311.17.01 – Unauthenticated Sensitive Information Exposure
The Store Locator Plus® for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2311.17.01. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.
*-2311.17.01
Non indiqué
12/08/2024
Store Locator Plus <= 5.5.15 – Authenticated Privilege Escalation
There is functionality in the Store Locator Plus for WordPress plugin through 5.5.15 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin.
*-5.5.15
5.7
26/04/2021
Store Locator Plus <= 5.12.3 – Unauthenticated Stored Cross-Site Scripting
There are several endpoints in the Store Locator Plus for WordPress plugin through 5.12.3 that could allow unauthenticated attackers the ability to inject malicious JavaScript into pages.
*-5.12.3
5.13.8
26/04/2021
Store Locator Plus <= 4.5.11 – Cross-Site Scripting
The Store Locator Plus plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘start’ parameter in versions up to, and including, 4.5.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
[*, 4.5.11)
4.5.12
01/07/2016
Store Locator Plus < 4.2.27 – Email Injection
The Store Locator Plus plugin for WordPress is vulnerable to Email Injection in versions before 4.2.27. This is due to nonce leakage. This makes it possible for attackers to send spam emails from a fake address.
[*, 4.2.27)
4.2.27
17/01/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.