Extension WordPress
Vulnérabilités wp tell a friend popup form
Cette page rassemble les failles publiées pour wp tell a friend popup form, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de wp tell a friend popup form
2 fiches
wp tell a friend popup form <= 7.1 – Authenticated (Administrator+) Stored Cross-Site Scripting
The wp tell a friend popup form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings versions up to, and including, 7.1 due to insufficient input sanitization and output escaping. This makes it possible for…
*-7.1
Non indiqué
26/07/2023
wp tell a friend popup form <= 7.1 – Cross-Site Request Forgery via 'TellAFriend_admin'
The wp tell a friend popup form plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 7.1. This is due to missing or incorrect nonce validation on the 'TellAFriend_admin' function. This makes…
*-7.1
Non indiqué
26/07/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.