Extension WordPress
Vulnérabilités Wholesale Market
Cette page rassemble les failles publiées pour Wholesale Market, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Wholesale Market
2 fiches
Wholesale Market <= 2.2.0 – Information Disclosure via Unauthenticated Arbitrary File Download
The Wholesale Market plugin for WordPress is vulnerable to arbitrary file download due to missing file name validation via the ced_cwsm_log_download parameter in versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to download…
*-2.2.0
2.2.1
12/12/2022
Wholesale Market for WooCommerce <= 2.0.0 & Wholesale Market <= 2.2.1 – Cross-Site Request Forgery
Multiple plugins for WordPress are vulnerable to Cross-Site Request Forgery in various versions. This is due to missing or incorrect nonce validation on the 'wholesale_market' page. This makes it possible for unauthenticated attackers to update the plugin's settings…
*-2.2.1
2.2.2
08/12/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.