Extension WordPress
Vulnérabilités Taggbox – Free Social Media Widgets, Review Badges & Shoppable UGC
Cette page rassemble les failles publiées pour Taggbox – Free Social Media Widgets, Review Badges & Shoppable UGC, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Taggbox – Free Social Media Widgets, Review Badges & Shoppable UGC
5 fiches
Taggbox <= 3.3 – Cross-Site Request Forgery
The Taggbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to…
*-3.3
3.4
11/07/2024
Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics <= 3.2 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.2 due to insufficient input sanitization and output escaping on…
*-3.2
3.3
16/04/2024
Taggbox <= 3.1 – Unauthenticated PHP Object Injection
The Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1 via deserialization of untrusted input. This makes it possible…
*-3.1
3.2
05/01/2024
Taggbox <= 3.3 – Missing Authorization
The Taggbox plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on an unknown function in versions up to, and including, 3.3. This makes it possible for authenticated attackers, with subscriber-level access and…
*-3.3
3.4
19/10/2023
Taggbox <= 3.3 – Cross-Site Request Forgery
The Taggbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3. This is due to missing or incorrect nonce validation on one of its functions. This makes it possible for unauthenticated…
*-3.3
3.4
12/10/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.