Extension WordPress
Vulnérabilités WP Hardening (discontinued)
Cette page rassemble les failles publiées pour WP Hardening (discontinued), leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP Hardening (discontinued)
3 fiches
WP Hardening – Fix Your WordPress Security <= 1.2.6 – Unauthenticated Security Feature Bypass to Username Enumeration
The WP Hardening – Fix Your WordPress Security plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 1.2.6. This is due to use of an incorrect regular expression within the "Stop…
*-1.2.6
1.2.7
17/09/2024
WP Hardening – Fix Your WordPress Security <= 1.2.1 – Reflected Cross-Site Scripting
The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the historyvalue GET parameter before outputting it in a Javascript block, leading to a reflected Cross-Site Scripting issue.
[*, 1.2.2)
1.2.2
07/06/2021
WP Hardening – Fix Your WordPress Security <= 1.2.1 – Reflected Cross-Site Scripting
The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the $_SERVER['REQUEST_URI'] before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue.
*-1.2.1
1.2.2
07/06/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.