Alertes, guideset veille WordPress.

Filtre par plugin

rs members

Effacer

Members – Membership & User Role Editor Plugin

MoyenneCVSS 5.3

CVE-2024-11008

Faille de sécurité, non authentifié, dans Members – Membership & User Role Editor Plugin (<= 3.2.10)

Plugin: Members – Membership & User Role Editor Plugin
Versions: <= 3.2.10
CVSS: 5.3/10
Correctif: 3.2.11

10 déc. 2024

Lire

MoyenneCVSS 6.3

CVE-2024-10681

Faille de sécurité, authentifié (Abonné+), dans ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup (<= 4.0.51)

Plugin: ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
Versions: <= 4.0.51
CVSS: 6.3/10
Correctif: 4.0.52

5 déc. 2024

Lire

s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions

ÉlevéeCVSS 8.1

CVE-2024-51815

Exécution de code à distance (RCE), non authentifié, dans s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions (<= 241114)

Plugin: s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
Versions: <= 241114
CVSS: 8.1/10
Correctif: 241216

2 déc. 2024

Lire

MoyenneCVSS 5.3

CVE-2024-11083

Faille de sécurité, non authentifié, dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.15.18)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.15.18
CVSS: 5.3/10
Correctif: 4.15.19

26 nov. 2024

Lire

MoyenneCVSS 4.3

CVE-2024-10216

Défaut de contrôle d'accès dans WP User Manager – User Profile Builder & Membership (<= 2.9.11)

Plugin: WP User Manager – User Profile Builder & Membership
Versions: <= 2.9.11
CVSS: 4.3/10
Correctif: 2.9.12

22 nov. 2024

Lire

MoyenneCVSS 4.3

CVE-2024-10537

Défaut de contrôle d'accès, authentifié (Auteur+), dans WP User Manager – User Profile Builder & Membership (<= 2.9.11)

Plugin: WP User Manager – User Profile Builder & Membership
Versions: <= 2.9.11
CVSS: 4.3/10
Correctif: 2.9.12

22 nov. 2024

Lire

MoyenneCVSS 4.4

CVE-2024-10517

XSS stocké, authentifié, dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.15.14)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.15.14
CVSS: 4.4/10
Correctif: 4.15.15

21 nov. 2024

Lire

MoyenneCVSS 4.4

CVE-2024-10518

XSS stocké, authentifié, dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.15.14)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.15.14
CVSS: 4.4/10
Correctif: 4.15.15

21 nov. 2024

Lire

MoyenneCVSS 5.3

CVE-2024-11088

Faille de sécurité dans Simple Membership (<= 4.5.5)

Plugin: Simple Membership
Versions: <= 4.5.5
CVSS: 5.3/10
Correctif: 4.5.6

20 nov. 2024

Lire

MoyenneCVSS 4.3

CVE-2024-10528

Défaut de contrôle d'accès, authentifié (Auteur+), dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.8.9)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.8.9
CVSS: 4.3/10
Correctif: 2.9.0

20 nov. 2024

Lire

Team Members – Multi Language Supported Team Plugin

ÉlevéeCVSS 7.2

CVE-2024-52385

Inclusion de fichier local (LFI), authentifié (Éditeur+), dans Team Members – Multi Language Supported Team Plugin (<= 7.4)

Plugin: Team Members – Multi Language Supported Team Plugin
Versions: <= 7.4
CVSS: 7.2/10
Correctif: 7.5

11 nov. 2024

Lire

CritiqueCVSS 9.8

CVE-2024-10547

Téléversement de fichier arbitraire, non authentifié, dans WP Membership (<= 1.6.2)

Plugin: WP Membership
Versions: <= 1.6.2
CVSS: 9.8/10
Correctif: 1.6.3

8 nov. 2024

Lire

205 – 216 sur 473 articles

Votre site est-il exposé ?

Analysez-le gratuitement. En-têtes de sécurité, fichiers exposés et version détectable, en quelques secondes.