Extension WordPress
Vulnérabilités WP-dTree
Cette page rassemble les failles publiées pour WP-dTree, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP-dTree
3 fiches
WP-dTree <= 4.4.5 – Cross-Site Request Forgery
The WP-dTree plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.4.5. This is due to missing or incorrect nonce validation on the wpdt_option_page() function. This makes it possible for unauthenticated attackers…
*-4.4.5
Non indiqué
04/09/2023
WP-dTree <= 4.4.5 – Reflected Cross-Site Scripting
The WP-dTree plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.4.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…
*-4.4.5
Non indiqué
01/09/2023
WP-dTree <= 4.4.5 – Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
The WP-dTree plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in versions up to, and including, 4.4.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
*-4.4.5
Non indiqué
19/04/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.