Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32148

Vulnérabilités (CVE)

1

Guides publiés

50

Publiés ce mois-ci

Filtre par plugin

wordpress

Custom Search by BestWebSoft – WordPress Custom Search Plugin

MoyenneCVSS 6.1

CVE-2017-18494

XSS réfléchi dans Custom Search by BestWebSoft – WordPress Custom Search Plugin (<= 1.35)

Plugin: Custom Search by BestWebSoft – WordPress Custom Search Plugin
Versions: <= 1.35
CVSS: 6.1/10
Correctif: 1.36

Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin

MoyenneCVSS 6.1

CVE-2017-18493

XSS réfléchi dans Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin (<= 0.1.1)

Plugin: Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin
Versions: <= 0.1.1
CVSS: 6.1/10
Correctif: 0.1.2

Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website

MoyenneCVSS 6.1

CVE-2017-18490

XSS réfléchi dans Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website (<= 1.2.1)

Plugin: Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website
Versions: <= 1.2.1
CVSS: 6.1/10
Correctif: 1.2.1

Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress

MoyenneCVSS 6.1

CVE-2017-18492

XSS (Cross-Site Scripting) dans Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress (<= 1.5.6)

Plugin: Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress
Versions: <= 1.5.6
CVSS: 6.1/10
Correctif: 1.5.7

Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress

MoyenneCVSS 6.1

CVE-2017-18491

XSS réfléchi dans Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress (<= 4.0.6)

Plugin: Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress
Versions: <= 4.0.6
CVSS: 6.1/10
Correctif: 4.0.6

Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress

MoyenneCVSS 6.1

CVE-2017-18556

XSS (Cross-Site Scripting) dans Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress (<= 1.7.0)

Plugin: Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress
Versions: <= 1.7.0
CVSS: 6.1/10
Correctif: 1.7.1

MoyenneCVSS 6.1

CVE-2017-18503

XSS (Cross-Site Scripting) dans Twitter Cards Meta – Best Twitter Card Plugin for WordPress (<= 2.5.0)

Plugin: Twitter Cards Meta – Best Twitter Card Plugin for WordPress
Versions: <= 2.5.0
CVSS: 6.1/10
Correctif: 2.5.0

ÉlevéeCVSS 8.8

CVE-2017-18504

CSRF (Cross-Site Request Forgery) dans Twitter Cards Meta – Best Twitter Card Plugin for WordPress (<= 2.4.5)

Plugin: Twitter Cards Meta – Best Twitter Card Plugin for WordPress
Versions: <= 2.4.5
CVSS: 8.8/10
Correctif: 2.5.0

MoyenneCVSS 6.4

CVE-2017-6102

XSS stocké, authentifié, dans wordpress plugin rockhoist-badges (<= 1.2.2)

Plugin: wordpress plugin rockhoist-badges
Versions: <= 1.2.2
CVSS: 6.4/10
Correctif: Aucun

CritiqueCVSS 9.8

CVE-2017-6104

Téléversement de fichier arbitraire dans Wordpress Plugin Mobile App Native 3.0 (3.0 - 3.0)

Plugin: Wordpress Plugin Mobile App Native 3.0
Versions: 3.0 - 3.0
CVSS: 9.8/10
Correctif: Aucun

MoyenneCVSS 6.1

CVE-2017-6103

XSS (Cross-Site Scripting) dans Wordpress plugin AnyVar (<= 0.1.1)

Plugin: Wordpress plugin AnyVar
Versions: <= 0.1.1
CVSS: 6.1/10
Correctif: Aucun

MC4WP: Mailchimp for WordPress

MoyenneCVSS 6.1

CVE-2016-10871

XSS réfléchi dans MC4WP: Mailchimp for WordPress (<= 4.0.11)

Plugin: MC4WP: Mailchimp for WordPress
Versions: <= 4.0.11
CVSS: 6.1/10
Correctif: 4.0.11

2593 – 2604 sur 2722 articles