Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32148

Vulnérabilités (CVE)

1

Guides publiés

50

Publiés ce mois-ci

Filtre par plugin

wp

MoyenneCVSS 4.4

CVE-2023-5940

XSS stocké, authentifié, dans WP Not Login Hide (WPNLH) (<= 1.0)

Plugin: WP Not Login Hide (WPNLH)
Versions: <= 1.0
CVSS: 4.4/10
Correctif: Aucun

MoyenneCVSS 4.3

CVE-2023-6532

CSRF (Cross-Site Request Forgery) dans WP Blogs' Planetarium (<= 1.0)

Plugin: WP Blogs' Planetarium
Versions: <= 1.0
CVSS: 4.3/10
Correctif: Aucun

WP Fastest Cache – WordPress Cache Plugin

CritiqueCVSS 9.8

CVE-2023-6063

Injection SQL, non authentifié, dans WP Fastest Cache – WordPress Cache Plugin (<= 1.2.1)

Plugin: WP Fastest Cache – WordPress Cache Plugin
Versions: <= 1.2.1
CVSS: 9.8/10
Correctif: 1.2.2

WP Custom Admin Interface

MoyenneCVSS 4.3

CVE-2023-47763

Défaut de contrôle d'accès dans WP Custom Admin Interface (<= 7.31)

Plugin: WP Custom Admin Interface
Versions: <= 7.31
CVSS: 4.3/10
Correctif: 7.32

WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

ÉlevéeCVSS 7.2

CVE-2023-47697

XSS (Cross-Site Scripting) dans WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce (<= 3.1.42)

Plugin: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
Versions: <= 3.1.42
CVSS: 7.2/10
Correctif: 3.1.43

MainWP Dashboard: Self-hosted WordPress Management for Agencies

ÉlevéeCVSS 7.2

CVE-2023-38519

Injection SQL, authentifié (Administrateur+), dans MainWP Dashboard: Self-hosted WordPress Management for Agencies (<= 4.4.3.3)

Plugin: MainWP Dashboard: Self-hosted WordPress Management for Agencies
Versions: <= 4.4.3.3
CVSS: 7.2/10
Correctif: 4.4.3.4

MoyenneCVSS 4.3

CVE-2023-47672

CSRF (Cross-Site Request Forgery) dans WP Category Post List Widget (<= 2.0.3)

Plugin: WP Category Post List Widget
Versions: <= 2.0.3
CVSS: 4.3/10
Correctif: Aucun

Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions

MoyenneCVSS 4.3

CVE-2023-47667

CSRF (Cross-Site Request Forgery) dans Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions (<= 7.0.17)

Plugin: Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions
Versions: <= 7.0.17
CVSS: 4.3/10
Correctif: 7.0.18

MoyenneCVSS 6.1

CVE-2023-47510

XSS réfléchi dans WPDBSpringClean (<= 1.6)

Plugin: WPDBSpringClean
Versions: <= 1.6
CVSS: 6.1/10
Correctif: Aucun

WP Discord Invite

MoyenneCVSS 5.4

CVE-2023-5006

CSRF (Cross-Site Request Forgery) dans WP Discord Invite (<= 2.5.1)

Plugin: WP Discord Invite
Versions: <= 2.5.1
CVSS: 5.4/10
Correctif: 2.5.1

UpdraftPlus: WP Backup & Migration Plugin

MoyenneCVSS 5.4

CVE-2023-5982

CSRF (Cross-Site Request Forgery) dans UpdraftPlus: WP Backup & Migration Plugin (<= 1.23.10)

Plugin: UpdraftPlus: WP Backup & Migration Plugin
Versions: <= 1.23.10
CVSS: 5.4/10
Correctif: 1.23.11

Great Restaurant Menu WP

MoyenneCVSS 4.3

CVE-2023-47649

CSRF (Cross-Site Request Forgery) dans Great Restaurant Menu WP (<= 1.3.1)

Plugin: Great Restaurant Menu WP
Versions: <= 1.3.1
CVSS: 4.3/10
Correctif: 1.4.0

2929 – 2940 sur 4343 articles