Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32327

Vulnérabilités (CVE)

1

Guides publiés

229

Publiés ce mois-ci

Filtre par plugin

CritiqueCVSS 9.8

CVE-2020-27481

Injection SQL, non authentifié, dans Good LMS - Learning Management System WP Plugin (<= 2.1.4)

Plugin: Good LMS - Learning Management System WP Plugin
Versions: <= 2.1.4
CVSS: 9.8/10
Correctif: 2.1.5

Ultimate Reviews

CritiqueCVSS 9.8

CVE-2020-36726

Injection d'objet PHP dans Ultimate Reviews (<= 2.1.33)

Plugin: Ultimate Reviews
Versions: <= 2.1.33
CVSS: 9.8/10
Correctif: 2.1.33

CritiqueCVSS 10.0

CVE-2020-36157

Élévation de privilèges, non authentifié, dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.1.12)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.1.12
CVSS: 10.0/10
Correctif: 2.1.12

CritiqueCVSS 10.0

CVE-2020-36155

Élévation de privilèges, non authentifié, dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.1.12)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.1.12
CVSS: 10.0/10
Correctif: 2.1.12

CritiqueCVSS 9.9

CVE-2020-36156

Élévation de privilèges, authentifié, dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.1.12)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.1.12
CVSS: 9.9/10
Correctif: 2.1.12

Welcart e-Commerce

ÉlevéeCVSS 7.5

CVE-2020-28339

Injection d'objet PHP dans Welcart e-Commerce (<= 1.9.36)

Plugin: Welcart e-Commerce
Versions: <= 1.9.36
CVSS: 7.5/10
Correctif: 1.9.36

GDPR CCPA Compliance & Cookie Consent Banner

CritiqueCVSS 9.8

CVE-2020-36718

Injection d'objet PHP dans GDPR CCPA Compliance & Cookie Consent Banner (<= 2.3)

Plugin: GDPR CCPA Compliance & Cookie Consent Banner
Versions: <= 2.3
CVSS: 9.8/10
Correctif: 2.4

ÉlevéeCVSS 8.8

CVE-2021-24143

Injection SQL dans AccessPress Social Icons (<= 1.8.1)

Plugin: AccessPress Social Icons
Versions: <= 1.8.1
CVSS: 8.8/10
Correctif: 1.8.1

Simple File List

CritiqueCVSS 9.8

CVE-2020-36847

Exécution de code à distance (RCE) dans Simple File List (<= 4.2.3)

Plugin: Simple File List
Versions: <= 4.2.3
CVSS: 9.8/10
Correctif: 4.2.3

CM Download Manager – Organize, Protect & Share Files in WordPress

MoyenneCVSS 5.5

CVE-2020-27344

XSS stocké, authentifié, dans CM Download Manager – Organize, Protect & Share Files in WordPress (<= 2.8.0)

Plugin: CM Download Manager – Organize, Protect & Share Files in WordPress
Versions: <= 2.8.0
CVSS: 5.5/10
Correctif: 2.8.0

Simple Download Monitor

MoyenneCVSS 6.1

CVE-2020-5650

XSS stocké, non authentifié, dans Simple Download Monitor (<= 3.3.8)

Plugin: Simple Download Monitor
Versions: <= 3.3.8
CVSS: 6.1/10
Correctif: 3.3.9

Loginizer

CritiqueCVSS 9.8

CVE-2020-27615

Injection SQL dans Loginizer (<= 1.6.4)

Plugin: Loginizer
Versions: <= 1.6.4
CVSS: 9.8/10
Correctif: 1.6.4

29761 – 29772 sur 32326 articles