Alertes, guideset veille WordPress.

Filtre par plugin

user profile

Effacer

MoyenneCVSS 4.3

CVE-2024-56211

Défaut de contrôle d'accès dans UserPro - Community and User Profile WordPress Plugin (<= 5.1.9)

Plugin: UserPro - Community and User Profile WordPress Plugin
Versions: <= 5.1.9
CVSS: 4.3/10
Correctif: Aucun

19 déc. 2024

Lire

MoyenneCVSS 6.1

CVE-2024-56210

XSS réfléchi dans UserPro - Community and User Profile WordPress Plugin (<= 5.1.9)

Plugin: UserPro - Community and User Profile WordPress Plugin
Versions: <= 5.1.9
CVSS: 6.1/10
Correctif: Aucun

19 déc. 2024

Lire

CritiqueCVSS 9.8

CVE-2024-56214

Inclusion de fichier local (LFI), non authentifié, dans UserPro - Community and User Profile WordPress Plugin (<= 5.1.9)

Plugin: UserPro - Community and User Profile WordPress Plugin
Versions: <= 5.1.9
CVSS: 9.8/10
Correctif: Aucun

19 déc. 2024

Lire

MoyenneCVSS 6.1

CVE-2024-54358

XSS réfléchi dans 3D Avatar User Profile (<= 1.0.0)

Plugin: 3D Avatar User Profile
Versions: <= 1.0.0
CVSS: 6.1/10
Correctif: Aucun

12 déc. 2024

Lire

MoyenneCVSS 6.3

CVE-2024-10681

Faille de sécurité, authentifié (Abonné+), dans ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup (<= 4.0.51)

Plugin: ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
Versions: <= 4.0.51
CVSS: 6.3/10
Correctif: 4.0.52

5 déc. 2024

Lire

MoyenneCVSS 6.4

CVE-2024-11453

XSS stocké, authentifié (Contributeur+), dans GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets (<= 1.8.8)

Plugin: GS Pinterest Portfolio – Pins Grid, Masonry, User Profile, Popup & Board Widgets
Versions: <= 1.8.8
CVSS: 6.4/10
Correctif: 1.8.9

2 déc. 2024

Lire

MoyenneCVSS 5.3

CVE-2024-11083

Faille de sécurité, non authentifié, dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.15.18)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.15.18
CVSS: 5.3/10
Correctif: 4.15.19

26 nov. 2024

Lire

MoyenneCVSS 4.3

CVE-2024-10216

Défaut de contrôle d'accès dans WP User Manager – User Profile Builder & Membership (<= 2.9.11)

Plugin: WP User Manager – User Profile Builder & Membership
Versions: <= 2.9.11
CVSS: 4.3/10
Correctif: 2.9.12

22 nov. 2024

Lire

MoyenneCVSS 4.3

CVE-2024-10537

Défaut de contrôle d'accès, authentifié (Auteur+), dans WP User Manager – User Profile Builder & Membership (<= 2.9.11)

Plugin: WP User Manager – User Profile Builder & Membership
Versions: <= 2.9.11
CVSS: 4.3/10
Correctif: 2.9.12

22 nov. 2024

Lire

MoyenneCVSS 4.4

CVE-2024-10517

XSS stocké, authentifié, dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.15.14)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.15.14
CVSS: 4.4/10
Correctif: 4.15.15

21 nov. 2024

Lire

MoyenneCVSS 4.4

CVE-2024-10518

XSS stocké, authentifié, dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.15.14)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.15.14
CVSS: 4.4/10
Correctif: 4.15.15

21 nov. 2024

Lire

MoyenneCVSS 4.3

CVE-2024-10528

Défaut de contrôle d'accès, authentifié (Auteur+), dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.8.9)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.8.9
CVSS: 4.3/10
Correctif: 2.9.0