WordPress Plugins, Themes, Core – Sicherheitslücken 2021

Kalenderwoche 47

Plugins

24.11.2021 Hide My WP < 6.2.4 – Unauthenticated Plugin Deactivation
24.11.2021 Hide My WP < 6.2.4 – Unauthenticated SQL Injection
24.11.2021 Simple JWT Login < 3.3.0 – Insecure Password Creation

23.11.2021 Paid Memberships Pro < 2.6.6 – Reflected Cross-Site Scripting
23.11.2021 Gwolle Guestbook < 4.2.0 – Reflected Cross-Site Scripting
23.11.2021 WPFront User Role Editor < 3.2.1.11184 – Reflected Cross-Site Scripting
23.11.2021 Tickera < 3.4.8.3 – Unauthenticated Stored Cross-Site Scripting
23.11.2021 WP Guppy <= 1.2 – Sensitive Information Disclosure

22.11.2021 Logo Carousel < 3.4.2 – Contributor+ Stored Cross-Site Scripting
22.11.2021 Logo Carousel < 3.4.2 – Unauthorised Private Post Access
22.11.2021 Ni WooCommerce Custom Order Status < 1.9.7 – Subscriber+ SQL Injection
22.11.2021 WCFM – WooCommerce Multivendor Marketplace < 3.4.12 – Unauthenticated SQL Injection
22.11.2021 Everest Forms < 1.8.0 – Reflected Cross-Site Scripting
22.11.2021 WP Visitor Statistics (Real Time Traffic) < 4.8 – Subscriber+ SQL Injection
22.11.2021 Kudos Donations < 3.1.2 – Arbitrary Items Deletion via CSRF
22.11.2021 Icegram < 2.0.5 – Reflected Cross-Site Scripting
22.11.2021 Blog2Social < 6.8.7 – Reflected Cross-Site Scripting

21.11.2021 Backup Migration < 1.1.6 – Admin+ Stored Cross-Site Scripting

WordPress Core

25.11.2021 WordPress < 5.8 – Plugin Confusion (Artikel dazu, in Englisch)

Seiten: 1 2 3 4 5 6 7 8 9 10 11 12