Extension WordPress
Vulnérabilités wp-live-chat-support-pro
Cette page rassemble les failles publiées pour wp-live-chat-support-pro, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de wp-live-chat-support-pro
2 fiches
WP Live Chat Support Pro <= 8.0.26 – Arbitrary File Upload
The WP Live Chat Support Pro plugin through 8.0.26 for WordPress contains an arbitrary file upload vulnerability. This results from an incomplete patch for CVE-2018-12426. Arbitrary file upload is achieved by using a non-blacklisted executable file extension in…
*-8.0.26
8.0.27
07/05/2019
WP Live Chat Support Pro <= 8.0.06 – Remote Code Execution via unrestricted file upload
The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side validation of allowed file types, as demonstrated by a v1/remote_upload request with a .php filename and the…
*-8.0.06
8.0.07
11/03/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.