Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32148

Vulnérabilités (CVE)

Guides publiés

Publiés ce mois-ci

Filtre par plugin

wordpres

Effacer

MoyenneCVSS 4.3

CVE-2021-24668

CSRF (Cross-Site Request Forgery) dans MAZ Loader – Preloader Builder for WordPress (<= 1.4.0)

Plugin: MAZ Loader – Preloader Builder for WordPress
Versions: <= 1.4.0
CVSS: 4.3/10
Correctif: 1.4.1

XSS stocké dans Advanced Access Manager – Access Governance for WordPress (<= 6.8.0)

Plugin: Advanced Access Manager – Access Governance for WordPress
Versions: <= 6.8.0
CVSS: 4.8/10
Correctif: 6.8.0

XSS stocké dans LearnPress – WordPress LMS Plugin for Create and Sell Online Courses (<= 4.1.3.1)

Plugin: LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
Versions: <= 4.1.3.1
CVSS: 5.5/10
Correctif: 4.1.3.2

XSS stocké dans WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) (<= 15.3)

Plugin: WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN)
Versions: <= 15.3
CVSS: 6.1/10
Correctif: 15.4

XSS stocké dans WordPress ERP, HR, CRM, and Project Management Plugin – Business Manager (<= 1.4.5)

Plugin: WordPress ERP, HR, CRM, and Project Management Plugin – Business Manager
Versions: <= 1.4.5
CVSS: 5.5/10
Correctif: 1.4.6

XSS stocké dans WP Fastest Cache – WordPress Cache Plugin (<= 0.9.5)

Plugin: WP Fastest Cache – WordPress Cache Plugin
Versions: <= 0.9.5
CVSS: 8.8/10
Correctif: 0.9.5

Injection SQL, authentifié (Abonné+), dans WP Fastest Cache – WordPress Cache Plugin (<= 0.9.5)

Plugin: WP Fastest Cache – WordPress Cache Plugin
Versions: <= 0.9.5
CVSS: 8.8/10
Correctif: 0.9.5

XSS stocké, authentifié, dans Testimonial – WordPress Testimonial Showcase Plugin Grid Plus Testimonial Slider (<= 1.6.0)

Plugin: Testimonial – WordPress Testimonial Showcase Plugin Grid Plus Testimonial Slider
Versions: <= 1.6.0
CVSS: 5.5/10
Correctif: 1.6.0

Faille de sécurité dans Frontend Post WordPress Plugin – AccessPress Anonymous Post (2.8.0 - 2.8.0)

Plugin: Frontend Post WordPress Plugin – AccessPress Anonymous Post
Versions: 2.8.0 - 2.8.0
CVSS: 8.8/10
Correctif: 2.8.1

Injection SQL dans MAZ Loader – Preloader Builder for WordPress (<= 1.3.3)

Plugin: MAZ Loader – Preloader Builder for WordPress
Versions: <= 1.3.3
CVSS: 8.8/10
Correctif: 1.3.3

Faille de sécurité dans Similar Posts – Best Related Posts Plugin for WordPress (<= 3.1.5)

Plugin: Similar Posts – Best Related Posts Plugin for WordPress
Versions: <= 3.1.5
CVSS: 7.2/10
Correctif: 3.1.6

XSS stocké dans Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More (<= 5.0.07)

Plugin: Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More
Versions: <= 5.0.07
CVSS: 4.8/10
Correctif: 5.0.07

6 oct. 2021

Lire

2377 – 2388 sur 2723 articles