Extension WordPress
Vulnérabilités WPGSI: Spreadsheet Integration
Cette page rassemble les failles publiées pour WPGSI: Spreadsheet Integration, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de WPGSI: Spreadsheet Integration
7 fiches
WPGSI: Spreadsheet Integration <= 3.8.3 – Missing Authorization to Unauthenticated Arbitrary Post Creation and Deletion via Forged Base64 Token
The WPGSI: Spreadsheet Integration plugin for WordPress is vulnerable to unauthorized modification and loss of data due to missing capability checks and an insecure authentication mechanism on the `wpgsi_callBackFuncAccept` and `wpgsi_callBackFuncUpdate` REST API functions in all versions up…
*-3.8.3
3.8.4
24/02/2026
Spreadsheet Integration <= 3.8.2 – Cross-Site Request Forgery to Arbitrary Post Publish
The Spreadsheet Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.2. This is due to improper nonce validation within the class-wpgsi-show.php script. This makes it possible for unauthenticated attackers…
*-3.8.2
3.8.3
04/03/2025
Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. <= 3.8.0 – Missing Authorization to Authenticated (Subscriber+) Settings Update
The Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check…
*-3.8.0
3.8.1
24/09/2024
Freemius SDK <= 2.5.9 – Reflected Cross-Site Scripting via fs_request_get
The Freemius SDK for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘fs_request_get’ function in versions up to, and including, 2.5.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to…
*-3.7.8
Non indiqué
18/07/2023
Freemius SDK <= 2.4.2 – Missing Authorization Checks
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions…
[*, 3.6.1)
3.6.1
04/03/2022
Spreadsheet Integration and Spreadsheet Integration Pro <= 3.5.0 – Cross-Site Request Forgery
The Spreadsheet Integration and Spreadsheet Integration Professional plugins for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.0. This is due to missing or incorrect nonce validation on the 'wpgsi_WorksheetColumnsTitle' function. This makes…
*-3.5.0
3.6.0
24/12/2021
Spreadsheet Integration and Spreadsheet Integration Pro <= 3.5.0 – Reflected Cross-Site Scripting
The Spreadsheet Integration and Spreadsheet Integration Professional plugins for WordPress are vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.5.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
*-3.5.0
3.6.0
24/12/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.