Thème WordPress
Vulnérabilités Ask Me – Responsive Questions & Answers WordPress
Cette page rassemble les failles publiées pour Ask Me – Responsive Questions & Answers WordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Ask Me – Responsive Questions & Answers WordPress
4 fiches
Ask Me < 6.8.7 – Cross-Site Request Forgery
The Ask Me theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, but not including, 6.8.7. This is due to missing or incorrect nonce validation on one of its functions. This makes it possible…
[*, 6.8.7)
6.8.7
28/10/2022
Ask Me <= 6.8.3 – Cross-Site Request Forgery
The Ask Me theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 6.8.3. This is due to missing or incorrect nonce validation when editing profiles. This makes it possible for unauthenticated attackers…
*-6.8.3
6.8.4
01/08/2022
Ask Me <= 6.8.1 – Reflected Cross-Site Scripting
The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit Profile page, leading to Reflected Cross-Site Scripting issues
[*, 6.8.2)
6.8.2
16/05/2022
Ask Me <= 6.8.1 – Cross-Site Request Forgery
The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker to trick logged in users to perform various actions on their behalf on the site.
[*, 6.8.2)
6.8.2
16/05/2022
Thèmes également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.