Démarrer
MoyenneCVSS 4.9CVE-2023-3404Faille de sécurité dans ProfileGrid – User Profiles, Groups and Communities (<= 5.5.0)
- Plugin
- ProfileGrid – User Profiles, Groups and Communities
- Versions
- <= 5.5.0
- CVSS
- 4.9/10
- Correctif
- 5.5.1
17 juil. 2023
LireBlog
Alertes, guideset veille WordPress.
Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.
32243
Vulnérabilités (CVE)
1
Guides publiés
145
Publiés ce mois-ci
Filtre par plugin
user profile
MoyenneCVSS 4.9MoyenneCVSS 4.4
CVE-2023-3996XSS stocké, authentifié (Administrateur+), dans ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup (<= 4.0.16)
- Plugin
- ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Versions
- <= 4.0.16
- CVSS
- 4.4/10
- Correctif
- 4.0.17
14 juil. 2023
LireMoyenneCVSS 4.3
CVE-2022-47424CSRF (Cross-Site Request Forgery) dans ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup (<= 4.0.5)
- Plugin
- ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Versions
- <= 4.0.5
- CVSS
- 4.3/10
- Correctif
- 4.0.6
10 juil. 2023
LireMoyenneCVSS 6.5
CVE-2023-3011CSRF (Cross-Site Request Forgery) dans ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup (<= 4.0.5)
- Plugin
- ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Versions
- <= 4.0.5
- CVSS
- 6.5/10
- Correctif
- 4.0.6
5 juil. 2023
Lire
CritiqueCVSS 9.9CVE-2023-3342Téléversement de fichier arbitraire, authentifié (Abonné+), dans User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder (<= 3.0.2)
- Plugin
- User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
- Versions
- <= 3.0.2
- CVSS
- 9.9/10
- Correctif
- 3.0.2.1
4 juil. 2023
Lire
CritiqueCVSS 9.8CVE-2023-3460Élévation de privilèges dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.6.6)
- Plugin
- Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
- Versions
- <= 2.6.6
- CVSS
- 9.8/10
- Correctif
- 2.6.7
29 juin 2023
LireÉlevéeCVSS 8.8CVE-2023-3343Injection d'objet PHP, authentifié (Abonné+), dans User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder (<= 3.0.1)
- Plugin
- User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
- Versions
- <= 3.0.1
- CVSS
- 8.8/10
- Correctif
- 3.0.2
29 juin 2023
LireMoyenneCVSS 4.4
CVE-2022-47421XSS stocké, authentifié (Administrateur+), dans ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup (<= 4.0.4)
- Plugin
- ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Versions
- <= 4.0.4
- CVSS
- 4.4/10
- Correctif
- 4.0.5
27 juin 2023
LireMoyenneCVSS 4.4
CVE-2023-33323XSS stocké, authentifié (Administrateur+), dans ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup (<= 4.0.2)
- Plugin
- ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
- Versions
- <= 4.0.2
- CVSS
- 4.4/10
- Correctif
- 4.0.3
13 juin 2023
LireMoyenneCVSS 4.3CVE-2023-31216CSRF (Cross-Site Request Forgery) dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.6.0)
- Plugin
- Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
- Versions
- <= 2.6.0
- CVSS
- 4.3/10
- Correctif
- 2.6.1
30 mai 2023
Lire
MoyenneCVSS 6.4CVE-2023-25981XSS stocké, authentifié (Éditeur+), dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.1)
- Plugin
- Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
- Versions
- <= 2.8.1
- CVSS
- 6.4/10
- Correctif
- 2.8.2
11 mai 2023
Lire
MoyenneCVSS 6.5CVE-2023-31073Défaut de contrôle d'accès dans Display custom fields in the frontend – Post and User Profile Fields (<= 1.2.0)
- Plugin
- Display custom fields in the frontend – Post and User Profile Fields
- Versions
- <= 1.2.0
- CVSS
- 6.5/10
- Correctif
- 1.2.1
24 avr. 2023
Lire277 – 288 sur 410 articles