Extension WordPress
Vulnérabilités WP-WebAuthn
Cette page rassemble les failles publiées pour WP-WebAuthn, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WP-WebAuthn
3 fiches
WP-WebAuthn <= 1.3.4 – Unauthenticated Stored Cross-Site Scripting
The WP-WebAuthn plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via the `wwa_auth` AJAX endpoint in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping on user supplied attributes logged…
*-1.3.4
Non indiqué
20/03/2026
WP-WebAuthn <= 1.3.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The WP-WebAuthn plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-1.3.1
1.3.2
30/09/2024
WP-WebAuthn <= 1.3.3 – Authenticated (Contributor+) Stored Cross-Site Scripting via wwa_login_form Shortcode
The WP-WebAuthn plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wwa_login_form shortcode in all versions up to, and including, 1.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…
*-1.3.3
1.3.4
27/09/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.