Extension WordPress
Vulnérabilités WP User – Custom Registration Forms, Login and User Profile
Cette page rassemble les failles publiées pour WP User – Custom Registration Forms, Login and User Profile, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP User – Custom Registration Forms, Login and User Profile
3 fiches
WP User <= 7.0 – Unauthenticated SQL Injection
The WP User plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 7.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This…
*-7.0
Non indiqué
09/12/2022
WP User <= 7.0 – Authenticated (Administrator+) Stored Cross-Site Scripting
The WP User plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-7.0
Non indiqué
06/12/2022
WP User – Custom Registration Forms, Login and User Profile < 7.0 – Reflected Cross-Site Scripting
The WP User WordPress plugin before 7.0 does not sanitise and escape some parameters in pages where the [wp_user] shortcode is used, leading to Reflected Cross-Site Scripting issues.
[*, 7.0)
7.0
31/01/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.