Extension WordPress
Vulnérabilités My YouTube Channel
Cette page rassemble les failles publiées pour My YouTube Channel, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de My YouTube Channel
4 fiches
My YouTube Channel <= 3.23.3 – Cross-Site Request Forgery to Cache Deletion
The My YouTube Channel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.23.3. This is due to missing or incorrect nonce validation on the clear_all_cache function. This makes it possible for…
*-3.23.3
3.23.4
23/02/2023
YouTube Channel < 3.0.12.1 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The YouTube Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 3.0.12.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…
*-3.0.12.1
3.23.0
11/01/2023
My YouTube Channel <= 3.0.12.1 – Authenticated (Administrator+) Stored Cross-Site Scripting
The My YouTube Channel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 3.0.12.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…
*-3.0.12.1
3.23.0
04/01/2023
My YouTube Channel <= 3.0.12.1 – Missing Authorization
The My YouTube Channel plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the clear_all_cache function in versions up to, and including, 3.0.12.1. This makes it possible for authenticated attackers, with subscriber-level…
*-3.0.12.1
3.23.0
04/01/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.