Extension WordPress
Vulnérabilités WP Cumulus
Cette page rassemble les failles publiées pour WP Cumulus, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP Cumulus
4 fiches
WP-Cumulus <= 1.22 – Cross-Site Scripting via xmlpath
The WP-Cumulus plugin for WordPress is vulnerable to Cross-Site Scripting via the 'xmlpath' parameter in versions up to, and including, 1.22 due to insufficient input sanitization and output escaping. This makes it possible for unauthorized attackers to inject…
*-1.22
1.23
20/11/2011
WP-Cumulus <= 1.22 – Cross-Site Scripting via tagcloud
Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for WordPress and the Joomulus module 2.0 and earlier for Joomla!, allows remote attackers to inject arbitrary web script or HTML via…
*-1.22
1.23
02/12/2009
WP-Cumulus <= 1.20 – Sensitive Information Exposure
WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installation path in an error message.
*-1.20
1.23
25/11/2009
WP Cumulus < 1.22 – Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in wp-cumulus.php in the WP-Cumulus Plug-in before 1.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
[*, 1.22)
1.22
27/09/2009
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.