CritiqueCVSS 9.8CVE-2022-4305Élévation de privilèges dans Login as User or Customer — User Switching (<= 3.2)
- Plugin
- Login as User or Customer — User Switching
- Versions
- <= 3.2
- CVSS
- 9.8/10
- Correctif
- 3.3
27 déc. 2022
LireBlog
Alertes, guides et veille WordPress.
Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.
31875
Vulnérabilités (CVE)
1
Guides publiés
170
Publiés ce mois-ci
Filtre par plugin
user login log
CritiqueCVSS 9.8
MoyenneCVSS 5.5CVE-2022-4697XSS stocké, authentifié (Administrateur+), dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.5.0)
- Plugin
- Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
- Versions
- <= 4.5.0
- CVSS
- 5.5/10
- Correctif
- 4.5.1
23 déc. 2022
LireMoyenneCVSS 5.5CVE-2022-4698XSS stocké, authentifié (Administrateur+), dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.5.0)
- Plugin
- Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
- Versions
- <= 4.5.0
- CVSS
- 5.5/10
- Correctif
- 4.5.1
23 déc. 2022
Lire
MoyenneCVSS 5.5CVE-2022-47442Faille de sécurité, authentifié (Administrateur+), dans UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP (<= 1.2.3.9)
- Plugin
- UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
- Versions
- <= 1.2.3.9
- CVSS
- 5.5/10
- Correctif
- 1.2.3.10
21 déc. 2022
LireMoyenneCVSS 6.6CVE-2022-45083Injection d'objet PHP, authentifié, dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.3.2)
- Plugin
- Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
- Versions
- <= 4.3.2
- CVSS
- 6.6/10
- Correctif
- 4.4.0
14 déc. 2022
LireCritiqueCVSS 9.8
CVE-2022-4049Injection SQL, non authentifié, dans WP User – Custom Registration Forms, Login and User Profile (<= 7.0)
- Plugin
- WP User – Custom Registration Forms, Login and User Profile
- Versions
- <= 7.0
- CVSS
- 9.8/10
- Correctif
- Aucun
9 déc. 2022
LireMoyenneCVSS 5.5
CVE-2022-4519XSS stocké, authentifié (Administrateur+), dans WP User – Custom Registration Forms, Login and User Profile (<= 7.0)
- Plugin
- WP User – Custom Registration Forms, Login and User Profile
- Versions
- <= 7.0
- CVSS
- 5.5/10
- Correctif
- Aucun
6 déc. 2022
LireMoyenneCVSS 6.5
CVE-2022-3880Défaut de contrôle d'accès dans Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan (<= 4.19)
- Plugin
- Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan
- Versions
- <= 4.19
- CVSS
- 6.5/10
- Correctif
- 4.20
21 nov. 2022
Lire
ÉlevéeCVSS 8.8CVE-2022-3912Téléversement de fichier arbitraire, authentifié (Abonné+), dans User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder (<= 2.2.4)
- Plugin
- User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
- Versions
- <= 2.2.4
- CVSS
- 8.8/10
- Correctif
- 2.2.41
21 nov. 2022
Lire
MoyenneCVSS 4.7CVE-2022-2445Traversée de répertoire, authentifié, dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (1.0 - 2.5.0)
- Plugin
- Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
- Versions
- 1.0 - 2.5.0
- CVSS
- 4.7/10
- Correctif
- 2.5.1
28 oct. 2022
LireMoyenneCVSS 4.3CVE-2022-3361Traversée de répertoire, authentifié (Contributeur+), dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.5.0)
- Plugin
- Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
- Versions
- <= 2.5.0
- CVSS
- 4.3/10
- Correctif
- 2.5.1
28 oct. 2022
LireÉlevéeCVSS 7.2CVE-2022-3384Exécution de code à distance (RCE), authentifié, dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.5.0)
- Plugin
- Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
- Versions
- <= 2.5.0
- CVSS
- 7.2/10
- Correctif
- 2.5.1
28 oct. 2022
Lire157 – 168 sur 227 articles