Extension WordPress
Vulnérabilités WP Shamsi – افزونه تاریخ شمسی و فارسی ساز وردپرس
Cette page rassemble les failles publiées pour WP Shamsi – افزونه تاریخ شمسی و فارسی ساز وردپرس, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP Shamsi – افزونه تاریخ شمسی و فارسی ساز وردپرس
3 fiches
WP Shamsi <= 4.3.3 – Missing Authorization leading to Authenticated (Subscriber+) Attachment Deletion
The WP Shamsi plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'file_batch_delete_callback' and 'file_delete' functions in versions up to, and including, 4.3.3. This makes it possible for subscriber-level…
*-4.3.3
Non indiqué
28/02/2023
WP Shamsi <= 4.1.0 – Missing Authorization to Arbitrary Plugin Deactivation
The WP Shamsi plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the deactivate() function hooked via init() in versions up to, and including, 4.1.0. This makes it possible for unauthenticated attackers…
*-4.1.0
4.1.1
28/11/2022
WP Shamsi <= 4.1.1 – Missing Authorization to Plugin Settings Update
The WP Shamsi plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when saving plugin settings in versions up to, and including, 4.1.1. This makes it possible for authenticated attackers, with subscriber-level permissions…
*-4.1.1
4.2.0
05/09/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.