Extension WordPress
Vulnérabilités WP Club Manager – WordPress Sports Club Plugin
Cette page rassemble les failles publiées pour WP Club Manager – WordPress Sports Club Plugin, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP Club Manager – WordPress Sports Club Plugin
3 fiches
WP Club Manager <= 2.2.11 – Missing Authorization
The WP Club Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpcm_match_players_item_order() function in versions up to, and including, 2.2.11. This makes it possible for unauthenticated attackers…
*-2.2.11
2.2.12
22/04/2024
WP Club Manager <= 2.2.11 – Authenticated (Player+) Stored Cross-Site Scripting
The WP Club Manager – WordPress Sports Club Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.2.11 due to insufficient input sanitization and output escaping on user supplied attributes.…
*-2.2.11
2.2.12
16/04/2024
WP Club Manager – WordPress Sports Club Plugin <= 2.2.10 – Missing Authorization to Unauthenticated Event Permalink Update
The WP Club Manager – WordPress Sports Club Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the settings_save() function in all versions up to, and including, 2.2.10. This…
*-2.2.10
2.2.11
05/02/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.