Extension WordPress
Vulnérabilités Tree Sitemap (Pages, Posts & Categories list)
Cette page rassemble les failles publiées pour Tree Sitemap (Pages, Posts & Categories list), leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Tree Sitemap (Pages, Posts & Categories list)
2 fiches
Tree Sitemap (Pages, Posts & Categories list) <= 2.9 – Missing Authorization to Arbitrary Plugin Installation/Activation
Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Tree Sitemap WordPress plugin before 2.9, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin from then blog,…
[*, 2.9)
2.9
22/04/2021
Tree Sitemap (Pages, Posts & Categories list) <= 2.9 – Cross-Site Request Forgery to Arbitrary Plugin Installation/Activation
The Tree Sitemap (Pages, Posts & Categories list) plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.9. This is due to missing or incorrect nonce validation on the 'cp_plugins_do_button_job_later_callback' AJAX action.…
*-2.9
3.1
22/04/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.