Thème WordPress
Vulnérabilités Puzzles | WP Magazine / Review with Store WordPress Theme + RTL
Cette page rassemble les failles publiées pour Puzzles | WP Magazine / Review with Store WordPress Theme + RTL, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Puzzles | WP Magazine / Review with Store WordPress Theme + RTL
3 fiches
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 – Unauthenticated PHP Object Injection
The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2.4 via deserialization of untrusted input 'view_more_posts' AJAX action.…
*-4.2.4
4.2.5
12/02/2025
Puzzles <= 4.2.6 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Puzzles theme for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated…
*-4.2.6
4.2.7
12/02/2025
Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 – Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the 'theme_options_ajax_post_action' AJAX action in all versions up to,…
*-4.2.4
4.2.5
11/02/2025
Thèmes également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.