Alertes, guideset veille WordPress.

Filtre par plugin

Effacer

ÉlevéeCVSS 7.2

CVE-2024-13618

SSRF (Server-Side Request Forgery), non authentifié, dans Downloable by American Osteopathic Association (<= 0.1.0)

Plugin: Downloable by American Osteopathic Association
Versions: <= 0.1.0
CVSS: 7.2/10
Correctif: Aucun

4 mars 2025

Lire

Stylish Google Sheet Reader – Embed Google Sheets as Interactive Tables with Built-in Form Submissions

MoyenneCVSS 6.1

CVE-2024-13863

XSS réfléchi dans Stylish Google Sheet Reader – Embed Google Sheets as Interactive Tables with Built-in Form Submissions (<= 4.0)

Plugin: Stylish Google Sheet Reader – Embed Google Sheets as Interactive Tables with Built-in Form Submissions
Versions: <= 4.0
CVSS: 6.1/10
Correctif: 4.1

4 mars 2025

Lire

MoyenneCVSS 5.4

CVE-2025-0958

Défaut de contrôle d'accès dans Ultimate WordPress Auction Plugin (<= 4.2.9)

Plugin: Ultimate WordPress Auction Plugin
Versions: <= 4.2.9
CVSS: 5.4/10
Correctif: 4.3.0

3 mars 2025

Lire

MoyenneCVSS 6.4

CVE-2025-0370

XSS stocké, authentifié (Contributeur+), dans Shortcodes Ultimate – Content Elements (<= 7.3.3)

Plugin: Shortcodes Ultimate – Content Elements
Versions: <= 7.3.3
CVSS: 6.4/10
Correctif: 7.3.4

3 mars 2025

Lire

Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments

MoyenneCVSS 4.3

CVE-2024-13682

CSRF (Cross-Site Request Forgery) dans Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments (<= 2.6.2)

Plugin: Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments
Versions: <= 2.6.2
CVSS: 4.3/10
Correctif: 2.6.3

3 mars 2025

Lire

Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments

MoyenneCVSS 4.3

CVE-2024-13724

Défaut de contrôle d'accès dans Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments (<= 2.6.2)

Plugin: Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments
Versions: <= 2.6.2
CVSS: 4.3/10
Correctif: 2.6.3

3 mars 2025

Lire

MoyenneCVSS 6.4

CVE-2024-9618

XSS stocké, authentifié (Contributeur+), dans Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits (<= 2.0.7.2)

Plugin: Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits
Versions: <= 2.0.7.2
CVSS: 6.4/10
Correctif: 2.0.7.3

3 mars 2025

Lire

MoyenneCVSS 6.4

CVE-2025-0433

XSS stocké, authentifié (Contributeur+), dans Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits (<= 2.0.7.1)

Plugin: Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits
Versions: <= 2.0.7.1
CVSS: 6.4/10
Correctif: 2.0.7.2

3 mars 2025

Lire

MoyenneCVSS 6.4

CVE-2025-0512

XSS stocké, authentifié (Contributeur+), dans Structured Content (JSON-LD) #wpsc (<= 1.6.3)

Plugin: Structured Content (JSON-LD) #wpsc
Versions: <= 1.6.3
CVSS: 6.4/10
Correctif: 1.6.4

3 mars 2025

Lire

MB Custom Post Types & Custom Taxonomies

MoyenneCVSS 4.4

CVE-2024-10143

XSS stocké, authentifié, dans MB Custom Post Types & Custom Taxonomies (<= 2.7.6)

Plugin: MB Custom Post Types & Custom Taxonomies
Versions: <= 2.7.6
CVSS: 4.4/10
Correctif: 2.7.7

3 mars 2025

Lire

MoyenneCVSS 4.4

CVE-2024-13383

XSS stocké, authentifié (Éditeur+), dans HD Quiz (<= 1.8.14)

Plugin: HD Quiz
Versions: <= 1.8.14
CVSS: 4.4/10
Correctif: 2.0.0

3 mars 2025

Lire

MoyenneCVSS 6.5

CVE-2025-1321

Injection SQL, authentifié (Contributeur+), dans teachPress (<= 9.0.7)

Plugin: teachPress
Versions: <= 9.0.7
CVSS: 6.5/10
Correctif: 9.0.8

3 mars 2025

Lire

12133 – 12144 sur 32610 articles

Votre site est-il exposé ?

Analysez-le gratuitement. En-têtes de sécurité, fichiers exposés et version détectable, en quelques secondes.