Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32102

Vulnérabilités (CVE)

1

Guides publiés

4

Publiés ce mois-ci

Editor Blocks by Download Manager

MoyenneCVSS 6.4

CVE-2023-22713

XSS stocké, authentifié (Contributeur+), dans Editor Blocks by Download Manager (<= 2.1.8)

Plugin: Editor Blocks by Download Manager
Versions: <= 2.1.8
CVSS: 6.4/10
Correctif: 2.1.9

MoyenneCVSS 6.4

CVE-2023-23820

XSS stocké, authentifié (Contributeur+), dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.5.4)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.5.4
CVSS: 6.4/10
Correctif: 4.5.5

MoyenneCVSS 4.4

CVE-2023-23881

XSS stocké, authentifié, dans Circles Gallery (<= 1.0.10)

Plugin: Circles Gallery
Versions: <= 1.0.10
CVSS: 4.4/10
Correctif: Aucun

Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery

ÉlevéeCVSS 7.3

CVE-2023-25988

Défaut de contrôle d'accès dans Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery (<= 1.7.6)

Plugin: Video Gallery – YouTube Gallery, Vimeo, Video Portfolio, Image Portfolio and Image Gallery
Versions: <= 1.7.6
CVSS: 7.3/10
Correctif: 1.7.7

WP Dynamic Keywords Injector

MoyenneCVSS 5.4

CVE-2022-47141

CSRF (Cross-Site Request Forgery) dans WP Dynamic Keywords Injector (<= 2.3.15)

Plugin: WP Dynamic Keywords Injector
Versions: <= 2.3.15
CVSS: 5.4/10
Correctif: 2.3.16

MoyenneCVSS 4.3

CVE-2023-23713

CSRF (Cross-Site Request Forgery) dans Theme Tweaker (<= 5.20)

Plugin: Theme Tweaker
Versions: <= 5.20
CVSS: 4.3/10
Correctif: Aucun

Clio Grow Form

MoyenneCVSS 4.4

CVE-2023-22683

Faille de sécurité, authentifié, dans Clio Grow Form (<= 1.0.0)

Plugin: Clio Grow Form
Versions: <= 1.0.0
CVSS: 4.4/10
Correctif: 1.0.1

Visualizer – Tables & Charts Manager with Built-in AI Generator

MoyenneCVSS 6.4

CVE-2023-23708

XSS stocké, authentifié (Contributeur+), dans Visualizer – Tables & Charts Manager with Built-in AI Generator (<= 3.9.4)

Plugin: Visualizer – Tables & Charts Manager with Built-in AI Generator
Versions: <= 3.9.4
CVSS: 6.4/10
Correctif: 3.9.5

CritiqueCVSS 9.8

CVE-2023-0037

Injection SQL, non authentifié, dans 10Web Map Builder for Google Maps (<= 1.0.72)

Plugin: 10Web Map Builder for Google Maps
Versions: <= 1.0.72
CVSS: 9.8/10
Correctif: 1.0.73

Stock market charts from finviz

MoyenneCVSS 4.4

CVE-2023-23809

XSS stocké, authentifié, dans Stock market charts from finviz (<= 1.0.1)

Plugin: Stock market charts from finviz
Versions: <= 1.0.1
CVSS: 4.4/10
Correctif: 1.0.2

Starter Templates – AI-Powered Templates for Elementor & Gutenberg

MoyenneCVSS 4.3

CVE-2022-46851

CSRF (Cross-Site Request Forgery) dans Starter Templates – AI-Powered Templates for Elementor & Gutenberg (<= 3.1.20)

Plugin: Starter Templates – AI-Powered Templates for Elementor & Gutenberg
Versions: <= 3.1.20
CVSS: 4.3/10
Correctif: 3.2.21

WP Coder – Insert & Manage Code Snippets

ÉlevéeCVSS 7.2

CVE-2023-0895

Injection SQL, authentifié, dans WP Coder – Insert & Manage Code Snippets (<= 2.5.3)

Plugin: WP Coder – Insert & Manage Code Snippets
Versions: <= 2.5.3
CVSS: 7.2/10
Correctif: 2.5.4

25825 – 25836 sur 32101 articles