Extension WordPress
Vulnérabilités WP-ViperGB
Cette page rassemble les failles publiées pour WP-ViperGB, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP-ViperGB
3 fiches
WP-ViperGB <= 1.6.1 – Cross-Site Request Forgery
The WP-ViperGB plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1. This is due to missing or incorrect nonce validation when saving plugin settings. This makes it possible for unauthenticated…
*-1.6.1
1.6.2
23/05/2024
Viper GuestBook <= 1.3.15 – Cross-Site Scripting
The Viper GuestBook plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 1.3.15 due to insufficient input sanitization and output escaping on a query arg. This makes it possible for attackers to inject…
[*, 1.3.16)
1.3.16
20/04/2015
WP-ViperGB <= 1.3.10 – Cross-Site Request Forgery to Cross-Site Scripting
Multiple cross-site request forgery (CSRF) vulnerabilities in the WP-ViperGB plugin before 1.3.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or conduct cross-site scripting (XSS)…
*-1.3.10
1.3.11
12/12/2014
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.