Extension WordPress
Vulnérabilités WP Page Builder
Cette page rassemble les failles publiées pour WP Page Builder, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP Page Builder
4 fiches
WP Page Builder <= 1.2.8 – Authenticated (Admin+) Stored Cross-Site Scripting
The WP Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in versions up to, and including, 1.2.8 due to insufficient input sanitization and output escaping. This makes it possible for administrator-level attackers…
*-1.2.8
Non indiqué
10/11/2022
WP Page Builder <= 1.2.6 – Authenticated (Author+) Stored Cross-Site Scripting
The WP Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-1.2.6
1.2.7
21/10/2022
WP Page Builder <= 1.2.3 – Insecure Default to Unauthorized Page Editing
By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pages – user roles must be specifically blocked from editing posts and pages.
[*, 1.2.4)
1.2.4
08/04/2021
WP Page Builder <= 1.2.3 – Multiple Stored Cross-Site scripting
The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML, including JavaScript, into pages via the “Raw HTML” widget and the “Custom HTML” widgets (though the custom HTML widget requires…
[*, 1.2.4)
1.2.4
08/04/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.