Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32144

Vulnérabilités (CVE)

Guides publiés

Publiés ce mois-ci

Filtre par plugin

wordpres

Effacer

MoyenneCVSS 6.1

CVE-2017-18566

XSS (Cross-Site Scripting) dans User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress (<= 1.5.5)

Plugin: User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress
Versions: <= 1.5.5
CVSS: 6.1/10
Correctif: 1.5.6

XSS réfléchi dans Custom Search by BestWebSoft – WordPress Custom Search Plugin (<= 1.35)

Plugin: Custom Search by BestWebSoft – WordPress Custom Search Plugin
Versions: <= 1.35
CVSS: 6.1/10
Correctif: 1.36

XSS réfléchi dans Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin (<= 0.1.1)

Plugin: Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin
Versions: <= 0.1.1
CVSS: 6.1/10
Correctif: 0.1.2

XSS réfléchi dans Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website (<= 1.2.1)

Plugin: Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website
Versions: <= 1.2.1
CVSS: 6.1/10
Correctif: 1.2.1

XSS (Cross-Site Scripting) dans Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress (<= 1.5.6)

Plugin: Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress
Versions: <= 1.5.6
CVSS: 6.1/10
Correctif: 1.5.7

XSS réfléchi dans Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress (<= 4.0.6)

Plugin: Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress
Versions: <= 4.0.6
CVSS: 6.1/10
Correctif: 4.0.6

XSS (Cross-Site Scripting) dans Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress (<= 1.7.0)

Plugin: Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress
Versions: <= 1.7.0
CVSS: 6.1/10
Correctif: 1.7.1