Se connecter Démarrer

Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31756

Vulnérabilités (CVE)

1

Guides publiés

51

Publiés ce mois-ci

Filtre par plugin

JS Help Desk – AI-Powered Support & Ticketing System

MoyenneCVSS 5.3

CVE-2026-57652

Défaut de contrôle d'accès, non authentifié, dans JS Help Desk – AI-Powered Support & Ticketing System (<= 3.1.0)

Plugin: JS Help Desk – AI-Powered Support & Ticketing System
Versions: <= 3.1.0
CVSS: 5.3/10
Correctif: 3.1.1

wpForo Forum

MoyenneCVSS 6.5

CVE-2026-57636

Injection SQL, authentifié (Contributeur+), dans wpForo Forum (<= 3.0.9)

Plugin: wpForo Forum
Versions: <= 3.0.9
CVSS: 6.5/10
Correctif: 3.1.0

Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid

MoyenneCVSS 6.4

CVE-2026-57650

XSS stocké, authentifié (Contributeur+), dans Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid (<= 1.8.3)

Plugin: Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid
Versions: <= 1.8.3
CVSS: 6.4/10
Correctif: 1.8.4

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin

ÉlevéeCVSS 7.2

CVE-2026-57317

XSS stocké, non authentifié, dans Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin (<= 1.6.12.2)

Plugin: Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
Versions: <= 1.6.12.2
CVSS: 7.2/10
Correctif: 1.6.12.4

Bopo – WooCommerce Product Bundle Builder

MoyenneCVSS 5.3

CVE-2026-57664

Faille de sécurité, non authentifié, dans Bopo – WooCommerce Product Bundle Builder (<= 1.1.6)

Plugin: Bopo – WooCommerce Product Bundle Builder
Versions: <= 1.1.6
CVSS: 5.3/10
Correctif: 1.2.0

Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe

MoyenneCVSS 6.5

CVE-2026-57662

Injection SQL, authentifié (Contributeur+), dans Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe (<= 30.0.0)

Plugin: Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe
Versions: <= 30.0.0
CVSS: 6.5/10
Correctif: 30.0.1

Recipe Cards For Your Food Blog from Zip Recipes

MoyenneCVSS 6.5

CVE-2026-57663

Injection SQL, authentifié (Contributeur+), dans Recipe Cards For Your Food Blog from Zip Recipes (<= 8.2.7)

Plugin: Recipe Cards For Your Food Blog from Zip Recipes
Versions: <= 8.2.7
CVSS: 6.5/10
Correctif: 8.2.8

WCBoost – Products Compare

MoyenneCVSS 5.3

CVE-2026-57633

Faille de sécurité, non authentifié, dans WCBoost – Products Compare (<= 1.1.0)

Plugin: WCBoost – Products Compare
Versions: <= 1.1.0
CVSS: 5.3/10
Correctif: 1.1.1

Restaurant Menu and Food Ordering

MoyenneCVSS 4.3

CVE-2025-63078

Défaut de contrôle d'accès dans Restaurant Menu and Food Ordering (<= 2.4.11)

Plugin: Restaurant Menu and Food Ordering
Versions: <= 2.4.11
CVSS: 4.3/10
Correctif: Aucun

WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets

MoyenneCVSS 4.9

CVE-2026-57628

Injection SQL, authentifié (Administrateur+), dans WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets (<= 4.0.1)

Plugin: WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets
Versions: <= 4.0.1
CVSS: 4.9/10
Correctif: 4.1.0

Ghost Kit – Page Builder Blocks, Motion Effects & Extensions

MoyenneCVSS 6.4

CVE-2026-57651

XSS stocké, authentifié (Contributeur+), dans Ghost Kit – Page Builder Blocks, Motion Effects & Extensions (<= 3.6.0)

Plugin: Ghost Kit – Page Builder Blocks, Motion Effects & Extensions
Versions: <= 3.6.0
CVSS: 6.4/10
Correctif: 3.6.1

Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More

ÉlevéeCVSS 7.5

CVE-2026-57647

Inclusion de fichier local (LFI), authentifié (Contributeur+), dans Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More (<= 1.6.1)

Plugin: Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More
Versions: <= 1.6.1
CVSS: 7.5/10
Correctif: 1.7.0

133 – 144 sur 31755 articles