Thème WordPress
Vulnérabilités Nexos – Real Estate WordPress Theme
Cette page rassemble les failles publiées pour Nexos – Real Estate WordPress Theme, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Nexos – Real Estate WordPress Theme
4 fiches
Nexos – Real Estate WordPress Theme <= 1.7 – SQL Injection
The Nexos – Real Estate WordPress Theme theme for WordPress is vulnerable to generic SQL Injection via the ‘search_order’ parameter in versions up to, and including, 1.7 due to insufficient escaping on the user-supplied parameter and lack of…
*-1.7
1.8
28/06/2020
Nexos – Real Estate <= 1.7 – Reflected Cross-Site Scripting
The Nexos – Real Estate theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_location’ parameter in versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for…
*-1.7
1.8
28/06/2020
Nexos – Real Estate WordPress Theme <= 1.7 – SQL Injection
The Nexos theme through 1.7 for WordPress allows side-map/?search_order= SQL Injection.
[*, 1.8)
1.8
17/06/2020
Nexos – Real Estate WordPress Theme < 1.8 – Cross-Site Scripting
The Nexos theme through 1.7 for WordPress allows top-map/?search_location= reflected XSS.
[*, 1.8)
1.8
17/06/2020
Thèmes également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.