Extension WordPress
Vulnérabilités WooCommerce Pre-Orders
Cette page rassemble les failles publiées pour WooCommerce Pre-Orders, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WooCommerce Pre-Orders
5 fiches
WooCommerce Pre-Orders <= 2.0.2 – Cross-Site Request Forgery
The WooCommerce Pre-Orders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on several of its functions. This makes it possible for…
*-2.0.2
2.0.3
10/07/2023
WooCommerce Pre-Orders <= 2.0.2 – Cross-Site Request Forgery to Order Cancellation
The WooCommerce Pre-Orders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated…
*-2.0.2
2.0.3
10/07/2023
WooCommerce Pre-Orders <= 2.0.1 – Reflected Cross-Site Scripting
The WooCommerce Pre-Orders plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
*-2.0.1
2.0.2
26/06/2023
WooCommerce Pre-Orders <= 2.0.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
The WooCommerce Pre-Orders plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and…
*-2.0.0
2.0.1
15/05/2023
WooCommerce Pre-Orders <= 1.9.0 – Unauthenticated Cross-Site Scripting
The WooCommerce Pre-Orders plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…
*-1.9.0
2.0.0
15/05/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.