Extension WordPress
Vulnérabilités GSheetConnector for WooCommerce – Send your Orders and Products to Google Sheet in Real-Time
Cette page rassemble les failles publiées pour GSheetConnector for WooCommerce – Send your Orders and Products to Google Sheet in Real-Time, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de GSheetConnector for WooCommerce – Send your Orders and Products to Google Sheet in Real-Time
4 fiches
WooCommerce Google Sheet Connector <= 1.3.20 – Cross-Site Request Forgery
The GSheetConnector for WC plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.20. This is due to missing or incorrect nonce validation on a function. This makes it possible for…
*-1.3.20
1.4.0
16/07/2025
WooCommerce Google Sheet Connector <= 1.3.11 – Missing Authorization
The WooCommerce Google Sheet Connector plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the execute_post_data function in all versions up to, and including, 1.3.11. This makes it possible for…
*-1.3.11
1.3.12
20/02/2024
Freemius SDK <= 2.5.9 – Reflected Cross-Site Scripting via fs_request_get
The Freemius SDK for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘fs_request_get’ function in versions up to, and including, 2.5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
*-1.3.4
1.3.5
18/07/2023
WooCommerce Google Sheet Connector < 1.3.6 – Cross-Site Request Forgery
The WooCommerce Google Sheet Connector plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and excluding, 1.3.6. This is due to missing or incorrect nonce validation when updating its access code. This makes it…
*-1.3.5
1.3.6
26/06/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.