Extension WordPress
Vulnérabilités Virusdie | One-click website security
Cette page rassemble les failles publiées pour Virusdie | One-click website security, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Virusdie | One-click website security
4 fiches
Virusdie <= 1.1.7 – Missing Authorization to Authenticated (Subscriber+) API Key Disclosure
The Virusdie – One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.7. This is due to missing capability checks on the `vd_get_apikey` function which is hooked to…
*-1.1.7
1.1.8
18/02/2026
Virusdie <= 1.1.6 – Missing Authorization
The Virusdie – One-click website security plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.1.6. This makes it possible for authenticated attackers,…
*-1.1.6
1.1.7
21/12/2025
Virusdie <= 1.1.6 – Authenticated (Subscriber+) Information Exposure
The Virusdie – One-click website security plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive…
*-1.1.6
1.1.7
21/12/2025
Virusdie <= 1.1.3 – Cross-Site Request Forgery
The Virusdie – One-click website security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.3. This is due to missing or incorrect nonce validation on a function. This makes it…
*-1.1.3
1.1.4
27/06/2025
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.