Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31998

Vulnérabilités (CVE)

1

Guides publiés

293

Publiés ce mois-ci

UpdraftPlus: WP Backup & Migration Plugin

MoyenneCVSS 6.1

CVE-2021-25089

XSS réfléchi dans UpdraftPlus: WP Backup & Migration Plugin (0.7.4 - 1.16.68)

Plugin: UpdraftPlus: WP Backup & Migration Plugin
Versions: 0.7.4 - 1.16.68
CVSS: 6.1/10
Correctif: 1.16.69

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

MoyenneCVSS 6.1

CVE-2021-24648

XSS réfléchi dans RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (<= 5.0.1.8)

Plugin: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Versions: <= 5.0.1.8
CVSS: 6.1/10
Correctif: 5.0.1.9

MoyenneCVSS 5.4

CVE-2021-24950

XSS stocké, authentifié, dans Insight Core (<= 1.0)

Plugin: Insight Core
Versions: <= 1.0
CVSS: 5.4/10
Correctif: Aucun

Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred

MoyenneCVSS 6.1

CVE-2021-25015

XSS réfléchi dans Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred (<= 2.3.2)

Plugin: Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
Versions: <= 2.3.2
CVSS: 6.1/10
Correctif: 2.4

Registrations for the Events Calendar – Event Registration Plugin

MoyenneCVSS 6.1

CVE-2021-25083

XSS réfléchi dans Registrations for the Events Calendar – Event Registration Plugin (<= 2.7.10)

Plugin: Registrations for the Events Calendar – Event Registration Plugin
Versions: <= 2.7.10
CVSS: 6.1/10
Correctif: 2.7.10

Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier )

MoyenneCVSS 6.1

CVE-2021-25031

XSS réfléchi dans Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier ) (<= 9.7.0)

Plugin: Image Hover Effects Ultimate ( Image Gallery, Effects, Lightbox, Comparison & Magnifier )
Versions: <= 9.7.0
CVSS: 6.1/10
Correctif: 9.7.1

Code Snippets

MoyenneCVSS 6.1

CVE-2021-25008

XSS réfléchi dans Code Snippets (<= 2.14.3)

Plugin: Code Snippets
Versions: <= 2.14.3
CVSS: 6.1/10
Correctif: 2.14.3

Ultimate FAQ Accordion Plugin

MoyenneCVSS 5.7

CVE-2021-24968

Défaut de contrôle d'accès dans Ultimate FAQ Accordion Plugin (<= 2.1.2)

Plugin: Ultimate FAQ Accordion Plugin
Versions: <= 2.1.2
CVSS: 5.7/10
Correctif: 2.1.2

WP Post Page Clone

MoyenneCVSS 4.3

CVE-2021-24733

Défaut de contrôle d'accès dans WP Post Page Clone (<= 1.1)

Plugin: WP Post Page Clone
Versions: <= 1.1
CVSS: 4.3/10
Correctif: 1.2

Orders Tracking for WooCommerce

MoyenneCVSS 6.1

CVE-2021-25062

XSS réfléchi dans Orders Tracking for WooCommerce (<= 1.0.14)

Plugin: Orders Tracking for WooCommerce
Versions: <= 1.0.14
CVSS: 6.1/10
Correctif: 1.1.10

Tutor LMS – eLearning and online course solution

MoyenneCVSS 6.1

CVE-2021-25017

XSS réfléchi dans Tutor LMS – eLearning and online course solution (<= 1.9.11)

Plugin: Tutor LMS – eLearning and online course solution
Versions: <= 1.9.11
CVSS: 6.1/10
Correctif: 1.9.12

WP Extra File Types

ÉlevéeCVSS 8.8

CVE-2021-24936

XSS stocké dans WP Extra File Types (<= 0.5)

Plugin: WP Extra File Types
Versions: <= 0.5
CVSS: 8.8/10
Correctif: 0.5.1

28225 – 28236 sur 31997 articles