Extension WordPress
Vulnérabilités Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types, page 2
Cette page rassemble les failles publiées pour Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types
22 fiches
Wicked Folders <= 2.18.16 – Missing Authorization via ajax_unassign_folders
The Wicked Folders plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the ajax_unassign_folders function in versions up to, and including, 2.18.16. This makes it possible for authenticated attackers, with subscriber-level permissions…
*-2.18.16
2.18.17
06/02/2023
Wicked Folders <= 2.18.9 – Subscriber+ SQL Injection
The Wicked Folders WordPress plugin before 2.18.10 does not sanitise and escape the folder_id parameter before using it in a SQL statement in the wicked_folders_save_sort_order AJAX action, available to any authenticated user. leading to an SQL injection
*-2.18.9
2.18.10
30/12/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.