Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32144

Vulnérabilités (CVE)

1

Guides publiés

46

Publiés ce mois-ci

Filtre par plugin

wordpres

PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin

MoyenneCVSS 6.1

CVE-2018-20970

XSS réfléchi dans PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin (<= 2.0.3)

Plugin: PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin
Versions: <= 2.0.3
CVSS: 6.1/10
Correctif: 2.0.3

Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More

ÉlevéeCVSS 8.3

CVE-2017-20192

XSS stocké, non authentifié, dans Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More (<= 2.05.03)

Plugin: Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More
Versions: <= 2.05.03
CVSS: 8.3/10
Correctif: 2.05.03

Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More

MoyenneCVSS 5.3

CVE-2017-20194

Divulgation d'informations, non authentifié, dans Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More (<= 2.05.03)

Plugin: Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More
Versions: <= 2.05.03
CVSS: 5.3/10
Correctif: 2.05.03

CritiqueCVSS 9.8

CVE-2017-16562

Contournement d'authentification dans UserPro - Community and User Profile WordPress Plugin (<= 4.9.17.1)

Plugin: UserPro - Community and User Profile WordPress Plugin
Versions: <= 4.9.17.1
CVSS: 9.8/10
Correctif: 4.9.17.1

MoyenneCVSS 6.1

CVE-2017-16758

XSS réfléchi dans Ultimate Instagram Feed – WordPress Plugin (<= 1.3)

Plugin: Ultimate Instagram Feed – WordPress Plugin
Versions: <= 1.3
CVSS: 6.1/10
Correctif: 1.3

CritiqueCVSS 9.8

CVE-2017-15919

Injection SQL dans Contact Form for WordPress – Ultimate Form Builder Lite (<= 1.3.7)

Plugin: Contact Form for WordPress – Ultimate Form Builder Lite
Versions: <= 1.3.7
CVSS: 9.8/10
Correctif: 1.3.7

ÉlevéeCVSS 8.8

CVE-2017-14847

Injection SQL dans WPAMS - Apartment Management System for wordpress (<= 17-07-2019)

Plugin: WPAMS - Apartment Management System for wordpress
Versions: <= 17-07-2019
CVSS: 8.8/10
Correctif: 17-07-2019

ÉlevéeCVSS 8.8

CVE-2017-14844

Injection SQL dans WPGYM - Wordpress Gym Management System (<= *)

Plugin: WPGYM - Wordpress Gym Management System
Versions: <= *
CVSS: 8.8/10
Correctif: Aucun

ÉlevéeCVSS 8.8

CVE-2017-14845

Injection SQL dans WPCHURCH - Church Management System for Wordpress (<= 13-07-2019)

Plugin: WPCHURCH - Church Management System for Wordpress
Versions: <= 13-07-2019
CVSS: 8.8/10
Correctif: 13-07-2019

ÉlevéeCVSS 8.8

CVE-2017-14843

Injection SQL, authentifié, dans School Management System for Wordpress (<= *)

Plugin: School Management System for Wordpress
Versions: <= *
CVSS: 8.8/10
Correctif: Aucun

ÉlevéeCVSS 8.8

CVE-2017-14846

Injection SQL dans Hospital Management System for Wordpress (<= 08-03-2018)

Plugin: Hospital Management System for Wordpress
Versions: <= 08-03-2018
CVSS: 8.8/10
Correctif: 22-05-2018

ÉlevéeCVSS 8.8

CVE-2017-14842

Injection SQL, authentifié, dans SMSmaster – Multipurpose SMS Gateway for Wordpress (<= *)

Plugin: SMSmaster – Multipurpose SMS Gateway for Wordpress
Versions: <= *
CVSS: 8.8/10
Correctif: Aucun

2569 – 2580 sur 2723 articles