Extension WordPress
Vulnérabilités Contact Form for WordPress – Ultimate Form Builder Lite
Cette page rassemble les failles publiées pour Contact Form for WordPress – Ultimate Form Builder Lite, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Contact Form for WordPress – Ultimate Form Builder Lite
3 fiches
Ultimate Form Builder Lite <= 1.3.7 – Cross-Site Scripting
The Ultimate Form Builder Lite plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping on the 'form_id' parameter. This makes it possible for attackers…
*-1.3.7
1.3.8
20/06/2018
Ultimate Form Builder Lite <= 1.3.6 – SQL Injection to PHP Object Injection
The ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with resultant PHP Object Injection, via wp-admin/admin-ajax.php.
[*, 1.3.7)
1.3.7
23/10/2017
Ultimate Form Builder Lite <= 1.3.2 – Reflected Cross-Site Scripting
The ultimate-form-builder-lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘ufbl_form_id’ parameter in versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
[*, 1.3.3)
1.3.3
19/04/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.