Extension WordPress
Vulnérabilités WP Hide & Security Enhancer
Cette page rassemble les failles publiées pour WP Hide & Security Enhancer, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP Hide & Security Enhancer
3 fiches
WP Hide & Security Enhancer <= 2.5.1 – Missing Authorization to Unauthenticated Arbitrary File Contents Deletion
The WP Hide & Security Enhancer plugin for WordPress is vulnerable to arbitrary file contents deletion due to a missing authorization and insufficient file path validation in the file-process.php in all versions up to, and including, 2.5.1. This…
*-2.5.1
2.5.2
05/12/2024
WP Hide & Security Enhancer <= 1.7.9.2 – Reflected Cross-Site Scripting
The WP Hide & Security Enhancer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' and 'component' parameters in versions up to, and including, 1.7.9.2 due to insufficient input sanitization and output escaping. This makes…
*-1.7.9.2
1.8
08/08/2022
WP Hide & Security Enhancer <= 1.3.9.2 – Arbitrary File Download
The WP Hide & Security Enhancer plugin for WordPress is vulnerable to Arbitrary File Download in versions before 1.4. This is due to insufficient validation on the file path supplied via the 'file_path' parameter. This makes it possible…
*-1.3.9.2
1.4
21/07/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.