Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32 988

Vulnérabilités (CVE)

Guides publiés

242

Publiés ce mois-ci

Filtre par plugin

Effacer

ÉlevéeCVSS 8.1

CVE-2026-92820

Téléversement de fichier arbitraire, non authentifié, dans Ninja Forms - File Uploads (<= 3.3.34)

Plugin: Ninja Forms - File Uploads
Versions: <= 3.3.34
CVSS: 8.1/10
Correctif: 3.3.35

XSS stocké, non authentifié, dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.57.2)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.57.2
CVSS: 7.2/10
Correctif: 1.57.2.1

XSS stocké, authentifié (Contributeur+), dans Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns (<= 6.4.5)

Plugin: Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
Versions: <= 6.4.5
CVSS: 6.4/10
Correctif: 6.4.6

XSS réfléchi dans Ad Inserter – Ad Manager & AdSense Ads (<= 2.8.18)

Plugin: Ad Inserter – Ad Manager & AdSense Ads
Versions: <= 2.8.18
CVSS: 6.1/10
Correctif: 2.8.19

XSS stocké, non authentifié, dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.57.2)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.57.2
CVSS: 7.2/10
Correctif: 1.57.2.1

XSS stocké, non authentifié, dans PDF Invoices & Packing Slips for WooCommerce (<= 5.16.1)

Plugin: PDF Invoices & Packing Slips for WooCommerce
Versions: <= 5.16.1
CVSS: 7.2/10
Correctif: 5.16.2

XSS stocké, non authentifié, dans Business Essentials for Contact Form 7 (<= 1.2.1)

Plugin: Business Essentials for Contact Form 7
Versions: <= 1.2.1
CVSS: 7.2/10
Correctif: 1.2.2

Faille de sécurité, authentifié (Abonné+), dans Super Forms – Drag & Drop Form Builder (<= 6.3.316)

Plugin: Super Forms – Drag & Drop Form Builder
Versions: <= 6.3.316
CVSS: 8.1/10
Correctif: 6.3.317

XSS DOM dans Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More (<= 5.5.1.3)

Plugin: Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
Versions: <= 5.5.1.3
CVSS: 4.7/10
Correctif: 5.5.1.4

XSS DOM dans Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More (<= 5.5.1.3)

Plugin: Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
Versions: <= 5.5.1.3
CVSS: 6.1/10
Correctif: 5.5.1.4

30 sept. 2026

Lire