Extension WordPress
Vulnérabilités Compare Products for WooCommerce
Cette page rassemble les failles publiées pour Compare Products for WooCommerce, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Compare Products for WooCommerce
4 fiches
Compare Products for WooCommerce <= 3.2.1 – Reflected Cross-Site Scripting
The Compare Products for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘s_feature’ parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible…
*-3.2.1
3.2.2
06/01/2025
Compare Products for WooCommerce <= 3.2.1 – Unauthenticated PHP Object Injection
The Compare Products for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.1 via deserialization of untrusted input from the 'woo_compare_list' cookie. This makes it possible for unauthenticated attackers…
*-3.2.1
3.2.2
06/01/2025
a3 Lazy Load <= 2.6.0 – Cross-Site Request Forgery to Settings Reset
The following plugins for WordPress are vulnerable to Cross-Site Request Forgery: a3 Lazy Load (
*-2.8.2
2.8.3
02/11/2022
a3rev Multiple Plugins <= Various Versions – Cross-Site Request Forgery to Settings Changes
The a3 Lazy Load, a3 Portfolio, Contact Us Page – Contact People, Dynamic Product Gallery for WooCommerce, a3 Responsive Slider, and Compare Products for WooCommerce plugins for WordPress are vulnerable to Cross-Site Request Forgery respectively in versions up…
*-2.8.0
2.8.1
24/05/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.