Extension WordPress
Vulnérabilités Ultimate Addons for Beaver Builder – Lite
Cette page rassemble les failles publiées pour Ultimate Addons for Beaver Builder – Lite, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Ultimate Addons for Beaver Builder – Lite
9 fiches
Ultimate Addons for Beaver Builder – Lite <= 1.5.9 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.5.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-1.5.9
1.5.10
07/08/2024
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 – Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Icons Widget
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Advanced Icons widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping.…
*-1.5.7
1.5.8
29/03/2024
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 – Authenticated (Contributor+) Stored Cross-Site Scripting via Info Table Widget
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Info Table widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping.…
*-1.5.7
1.5.8
29/03/2024
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 – Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This…
*-1.5.7
1.5.8
29/03/2024
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 – Authenticated (Contributor+) Stored Cross-Site Scripting via Image Separator Widget
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Separator widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping.…
*-1.5.7
1.5.8
29/03/2024
Ultimate Addons for Beaver Builder – Lite <= 1.5.7 – Authenticated (Contributor+) Stored Cross-Site Scripting via Heading Widget
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Heading widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This…
*-1.5.7
1.5.8
29/03/2024
Ultimate Addons for Beaver Builder – Lite <= 1.5.5 – Authenticated (Subscriber+) Settings Change
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to authorization bypass due to a missing capability and nonce check on the 'fetch_cloud_templates' function in versions up to, and including, 1.5.5. This makes it…
*-1.5.5
1.5.6
24/01/2023
Ultimate Addons for Beaver Builder – Lite <= 1.5.4 – Missing Authorization
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Authorization Bypass in versions up to, and including, 1.5.4. This is due to missing capability on the reload_icons function. This makes it possible for…
*-1.5.4
1.5.5
23/01/2023
Ultimate Addons for Beaver Builder – Lite <= 1.5.4 – Cross-Site Request Forgery
The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.4. This is due to missing or incorrect nonce validation on the reload_icons function. This…
*-1.5.4
1.5.5
23/01/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.