Extension WordPress
Vulnérabilités User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration, page 2
Cette page rassemble les failles publiées pour User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration
24 fiches
WP User Frontend <= 3.5.28 – Privilege Escalation
The WP User Frontend plugin for WordPress is vulnerable to privilege escalation due to the default user role checking on the process_registration function in versions up to, and including, 3.5.28 which accepts user supplied input via the urhidden…
*-3.5.28
3.5.29
31/10/2022
WP User Frontend <= 3.5.25 – SQL Injection & Reflected Cross-Site Scripting
The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to an SQL injection. Due to the lack of sanitisation…
*-3.5.25
3.5.26
27/12/2021
WP User Frontend – Membership, Profile, Registration & Post Submission Plugin for WordPress < 3.5.25 – Authenticated (Admin+) SQL Injection
The WP User Frontend – Membership, Profile, Registration & Post Submission Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the ‘post_id’ parameter in versions before 3.5.25 due to insufficient escaping on the user supplied…
[*, 3.5.25)
3.5.25
18/11/2021
WP User Frontend < 2.3.11 – Arbitrary File Upload
The WP User Frontend plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpuf_file_upload' and 'wpuf_insert_image' AJAX actions in versions before 2.3.11. This makes it possible for unauthenticated attackers to…
[*, 2.3.11)
2.3.11
08/02/2016
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.