Extension WordPress
Vulnérabilités PDF Invoices & Packing Slips for WooCommerce – Challan
Cette page rassemble les failles publiées pour PDF Invoices & Packing Slips for WooCommerce – Challan, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de PDF Invoices & Packing Slips for WooCommerce – Challan
3 fiches
Challan <= 3.7.58 – Cross-Site Request Forgery to Arbitrary Options Update
The Challan plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.7.58. This is due to missing or incorrect nonce validation on the woo_invoice_settings() function. This makes it possible for unauthenticated attackers…
*-3.7.58
3.7.59
07/05/2025
Appsero <= 1.2.1 – Missing Authorization
The Appsero analytics tool used in several plugins is vulnerable to authorization bypass due to a missing capability check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.1. This makes it possible…
*-3.4.8
3.4.9
16/12/2022
Appsero <= 1.2.0 – Cross-Site Request Forgery
The Appsero analytics tool used in several plugins is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the uninstall_reason_submission function used for feedback submission in versions up to, and including, 1.2.0. This makes it…
*-3.4.8
3.4.9
14/12/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.