WordPress plugin
Co-marquage service-public.fr security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium4
- Low0
All Co-marquage service-public.fr vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Cross-Site Request Forgery ≤0.5.77No patch available | CVE-2025-62113 | |
| Medium6.1 | Reflected Cross-Site Scripting via add_query_arg Parameter ≤0.5.76Update to 0.5.77 | CVE-2024-10522 | |
| Medium6.1 | Reflected Cross-Site Scripting via search_term ≤0.5.72Update to 0.5.73 | CVE-2024-29758 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode ≤0.5.71Update to 0.5.72 | CVE-2024-29908 |
- Medium4.3Cross-Site Request Forgery
≤0.5.77No patch available
- Medium6.1Reflected Cross-Site Scripting via add_query_arg Parameter
≤0.5.76Update to 0.5.77
- Medium6.1Reflected Cross-Site Scripting via search_term
≤0.5.72Update to 0.5.73
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
≤0.5.71Update to 0.5.72
Co-marquage service-public.fr: common questions
Does Co-marquage service-public.fr have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Co-marquage service-public.fr: 4 medium. At least one is not fixed in the latest version.
How do I check which version of Co-marquage service-public.fr I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Co-marquage service-public.fr vulnerability?
CVE-2025-62113, published Dec 31, 2025: Co-marquage service-public.fr <= 0.5.77 - Cross-Site Request Forgery. Severity: Medium (CVSS 4.3).
Is any Co-marquage service-public.fr vulnerability listed in CISA KEV?
No. None of the known Co-marquage service-public.fr vulnerabilities is currently listed in the CISA KEV catalog.