Soumettre.Fr
Approved changes feed: RSS · Atom
cpe:2.3:a:soumettre:soumettre.fr:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Soumettre (c856576f-d673-5d62-8aec-0d1a9c45086a) |
|---|---|
| Product | Soumettre.Fr (2c6a50cb-ffef-56a5-b7a4-37b7525e1eb7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-4654 |
vulnerable | 2026-06-08 07:29:17.013376 |
Soumettre.fr <= 2.1.5 - Improper Authorization to Unauthenticated Soumettre Posts Creation/Modification/Deletion
LOW (3.7)
The Soumettre.fr plugin for WordPress is vulnerable to unauthorized access and modification of data due to a improper authorization checks on the make_signature function in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to create/edit/delete Soumettre posts. This vulnerability affects only installations where the soumettre account is not connected (i.e. API key is not installed)
Published: 2025-07-02T03:47:24.306Z
Updated: 2026-04-08T16:51:58.194Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8675 |
vulnerable | 2026-06-08 07:00:25.371551 |
Soumettre.fr <= 2.1.3 - Missing Authorization
MEDIUM (4.3)
The Soumettre.fr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the soumettre_disconnect_gateway function in all versions up to, and including, 2.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to disconnect the gateway and delete the API key.
Published: 2024-10-01T07:30:14.837Z
Updated: 2026-04-08T17:15:01.044Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.