Extension WordPress
Vulnérabilités User Rights Access Manager
Cette page rassemble les failles publiées pour User Rights Access Manager, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de User Rights Access Manager
4 fiches
User Rights Access Manager <= 1.1.2 – Missing Authorization
The User Rights Access Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with…
*-1.1.2
Non indiqué
20/06/2024
User Rights Access Manager <= 1.1.2 – Reflected Cross-Site Scripting
The User Rights Access Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
*-1.1.2
Non indiqué
29/03/2024
User Rights Access Manager <= 1.0.7 – Access Restriction Bypass
The User Rights Access Manager plugin for WordPress is vulnerable to Access Restriction Bypass via the 'page' parameter in versions up to, and including, 1.0.7. This makes it possible for admin+ attackers to gain full site access even…
*-1.0.7
1.0.8
05/08/2021
User Rights Access Manager <= 1.0.3 – Missing Authorization
The User Rights Access Manager plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.0.3. This is due to improper implementation of access controls. This makes it possible for authenticated attackers, with administrator-level…
*-1.0.3
1.0.4
15/04/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.