Extension WordPress
Vulnérabilités Stylish Price List – Price Table Builder & QR Code Restaurant Menu
Cette page rassemble les failles publiées pour Stylish Price List – Price Table Builder & QR Code Restaurant Menu, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Stylish Price List – Price Table Builder & QR Code Restaurant Menu
6 fiches
Stylish Price List <= 7.2.2 – Missing Authorization
The Stylish Price List plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 7.2.2. This makes it possible for unauthenticated attackers to perform an…
*-7.2.2
7.2.3
30/11/2025
Stylish Price List <= 7.1.11 – Authenticated (Admin+) Stored Cross-Site Scripting
The Stylish Price List – Price Table Builder & QR Code Restaurant Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 7.1.11 due to insufficient input sanitization…
*-7.1.11
7.1.12
03/03/2025
Stylish Price List <= 7.1.7 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Stylish Price List – Price Table Builder & QR Code Restaurant Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 7.1.7 due to insufficient input sanitization and output escaping.…
*-7.1.7
7.1.8
13/09/2024
Stylish Price List <= 7.0.17 – Missing Authorization
The Stylish Price List plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on multiple functions in versions up to, and including, 7.0.17. This makes it possible for authenticated…
*-7.0.17
7.0.18
27/12/2023
Stylish Price List < 6.9.0 – Arbitrary Image Upload
The Stylish Price List WordPress plugin before 6.9.0 does not perform capability checks in its spl_upload_ser_img AJAX action (available to both unauthenticated and authenticated users), which could allow unauthenticated users to upload images.
[*, 6.9.0)
6.9.0
29/09/2021
Stylish Price List <= 6.9.0 – Missing Authorization
The Stylish Price List WordPress plugin before 6.9.1 does not perform capability checks in its spl_upload_ser_img AJAX action (available to authenticated users), which could allow any authenticated users, such as subscriber, to upload arbitrary images.
*-6.9.0
6.9.1
29/09/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.