Extension WordPress
Vulnérabilités wp-forecast
Cette page rassemble les failles publiées pour wp-forecast, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de wp-forecast
2 fiches
wp-forecast <= 9.2 – Authenticated (Contributor+) Stored Cross-Site Scripting
The wp-forecast plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 9.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-9.2
9.3
28/03/2024
wp-forecast <= 7.5 – Authenticated (Administrator+) Stored Cross-Site Scripting
The wp-forecast plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an unknown parameter in versions up to, and including, 7.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…
*-7.5
8.0
25/08/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.