Extension WordPress
Vulnérabilités WP Education – Education WordPress Plugin for Elementor
Cette page rassemble les failles publiées pour WP Education – Education WordPress Plugin for Elementor, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP Education – Education WordPress Plugin for Elementor
2 fiches
WP Education <= 1.2.8 – Authenticated (Contributor+) Stored Cross-Site Scripting via text_html_tag
The WP Education plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and…
*-1.2.8
1.2.9
18/10/2024
WP Education <= 1.2.6 – Cross-Site Request Forgery to Arbitrary Plugin Activation
The WP Education plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.6. This is due to missing or incorrect nonce validation on the 'plugin_activation' function. This makes it possible for unauthenticated…
*-1.2.6
1.2.7
28/02/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.