Extension WordPress

Vulnérabilités StreamWeasels Kick Integration

Cette page rassemble les failles publiées pour StreamWeasels Kick Integration, leurs plages de versions affectées et les correctifs signalés dans la base locale.

4Vulnérabilités
0Critiques
4Avec correctif
6,4CVSS maximal

Historique de sécurité

CVE et vulnérabilités de StreamWeasels Kick Integration

4 fiches

CVE-2025-9442 Moyenne · 6,4
StreamWeasels Kick Integration

StreamWeasels Kick Integration <= 1.1.5 – Authenticated (Contributor+) Stored Cross-Site Scripting via vodsChannel Parameter

The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘vodsChannel’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for…

Versions affectées

*-1.1.5

Correctif

1.1.6

Publication

05/09/2025

CVE-2025-7810 Moyenne · 5,4
StreamWeasels Kick Integration

StreamWeasels Kick Integration <= 1.1.4 – Authenticated (Contributor+) Stored Cross-Site Scripting

The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'data-uuid' attribute in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping on user supplied attributes.…

Versions affectées

*-1.1.4

Correctif

1.1.5

Publication

28/07/2025

CVE-2025-5589 Moyenne · 6,4
StreamWeasels Kick Integration

StreamWeasels Kick Integration <= 1.1.3 – Authenticated (Contributor+) Stored Cross-Site Scripting via status-classic-offline-text Parameter

The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘status-classic-offline-text’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for…

Versions affectées

*-1.1.3

Correctif

1.1.4

Publication

13/06/2025

CVE-2024-10184 Moyenne · 6,4
StreamWeasels Kick Integration

SW Kick Integration – Blocks and Shortcodes for Embedding Kick Streams <= 1.1.1 – Authenticated (Contributor+) Stored Cross-Site Scripting via sw-kick-embed Shortcode

The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sw-kick-embed shortcode in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping on user supplied attributes.…

Versions affectées

*-1.1.1

Correctif

1.1.2

Publication

28/10/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités