Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32327

Vulnérabilités (CVE)

1

Guides publiés

229

Publiés ce mois-ci

MoyenneCVSS 5.3

CVE-2024-8520

CSRF (Cross-Site Request Forgery) dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.8.6)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.8.6
CVSS: 5.3/10
Correctif: 2.8.7

Smart Custom 404 Error Page

MoyenneCVSS 6.1

CVE-2024-9204

XSS réfléchi dans Smart Custom 404 Error Page (<= 11.4.7)

Plugin: Smart Custom 404 Error Page
Versions: <= 11.4.7
CVSS: 6.1/10
Correctif: 11.4.8

MoyenneCVSS 6.4

CVE-2024-8519

XSS stocké, authentifié (Contributeur+), dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.8.6)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.8.6
CVSS: 6.4/10
Correctif: 2.8.7

MoyenneCVSS 4.3

CVE-2024-9233

CSRF (Cross-Site Request Forgery) dans Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation (<= 3.7.0)

Plugin: Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation
Versions: <= 3.7.0
CVSS: 4.3/10
Correctif: 3.7.1

Code Embed

MoyenneCVSS 6.4

CVE-2024-8804

XSS stocké, authentifié (Contributeur+), dans Code Embed (<= 2.4)

Plugin: Code Embed
Versions: <= 2.4
CVSS: 6.4/10
Correctif: 2.5

Advanced Shipping Rates for WooCommerce: Flexible Table Rate Shipping Rules

MoyenneCVSS 6.1

CVE-2024-9237

XSS réfléchi dans Advanced Shipping Rates for WooCommerce: Flexible Table Rate Shipping Rules (<= 1.5.9)

Plugin: Advanced Shipping Rates for WooCommerce: Flexible Table Rate Shipping Rules
Versions: <= 1.5.9
CVSS: 6.1/10
Correctif: 1.6

Team – Team Members Showcase Plugin

MoyenneCVSS 4.4

CVE-2024-9236

XSS stocké, authentifié, dans Team – Team Members Showcase Plugin (<= 4.4.1)

Plugin: Team – Team Members Showcase Plugin
Versions: <= 4.4.1
CVSS: 4.4/10
Correctif: 4.4.2

ShiftController Employee Shift Scheduling

MoyenneCVSS 6.1

CVE-2024-9435

XSS réfléchi dans ShiftController Employee Shift Scheduling (<= 4.9.66)

Plugin: ShiftController Employee Shift Scheduling
Versions: <= 4.9.66
CVSS: 6.1/10
Correctif: 4.9.67

Memberful – Membership Plugin

MoyenneCVSS 6.4

CVE-2024-9242

XSS stocké, authentifié (Contributeur+), dans Memberful – Membership Plugin (<= 1.73.7)

Plugin: Memberful – Membership Plugin
Versions: <= 1.73.7
CVSS: 6.4/10
Correctif: 1.73.8

Photo Gallery by 10Web – Mobile-Friendly Image Gallery

MoyenneCVSS 4.4

CVE-2024-8670

XSS stocké, authentifié (Administrateur+), dans Photo Gallery by 10Web – Mobile-Friendly Image Gallery (<= 1.8.28)

Plugin: Photo Gallery by 10Web – Mobile-Friendly Image Gallery
Versions: <= 1.8.28
CVSS: 4.4/10
Correctif: 1.8.29

Social Web Suite – Social Media Auto Post, Social Media Auto Publish

ÉlevéeCVSS 7.5

CVE-2024-8352

Lecture de fichier arbitraire dans Social Web Suite – Social Media Auto Post, Social Media Auto Publish (<= 4.1.11)

Plugin: Social Web Suite – Social Media Auto Post, Social Media Auto Publish
Versions: <= 4.1.11
CVSS: 7.5/10
Correctif: 4.1.12

Maspik – Ultimate Spam Protection

MoyenneCVSS 4.4

CVE-2024-9182

XSS stocké, authentifié (Administrateur+), dans Maspik – Ultimate Spam Protection (<= 2.1.2)

Plugin: Maspik – Ultimate Spam Protection
Versions: <= 2.1.2
CVSS: 4.4/10
Correctif: 2.1.3

16897 – 16908 sur 32326 articles