Se connecter Démarrer

Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31815

Vulnérabilités (CVE)

1

Guides publiés

110

Publiés ce mois-ci

CritiqueCVSS 9.8

CVE-2014-8621

Injection SQL dans Store Locator for WordPress with Google Maps – LotsOfLocales (<= 3.12)

Plugin: Store Locator for WordPress with Google Maps – LotsOfLocales
Versions: <= 3.12
CVSS: 9.8/10
Correctif: 3.12

BulletProof Security

MoyenneCVSS 4.3

CVE-2014-8749

SSRF (Server-Side Request Forgery) dans BulletProof Security (<= .51)

Plugin: BulletProof Security
Versions: <= .51
CVSS: 4.3/10
Correctif: .51.1

ÉlevéeCVSS 7.2

CVE-2014-8807

XSS stocké dans Contact Bank – Contact Form Builder for WordPress (<= 2.0.69)

Plugin: Contact Bank – Contact Form Builder for WordPress
Versions: <= 2.0.69
CVSS: 7.2/10
Correctif: 2.0.70

BulletProof Security

MoyenneCVSS 5.4

CVE-2014-7958

XSS (Cross-Site Scripting) dans BulletProof Security (<= .51.1)

Plugin: BulletProof Security
Versions: <= .51.1
CVSS: 5.4/10
Correctif: .51.1

MoyenneCVSS 6.1

CVE-2014-10391

Faille de sécurité dans WP Support Plus Responsive Ticket System (<= 4.0)

Plugin: WP Support Plus Responsive Ticket System
Versions: <= 4.0
CVSS: 6.1/10
Correctif: 4.1

MoyenneCVSS 6.1

CVE-2014-8087

XSS (Cross-Site Scripting) dans post highlights (2.0 - 2.6)

Plugin: post highlights
Versions: 2.0 - 2.6
CVSS: 6.1/10
Correctif: 2.6.1

Database Backup for WordPress

ÉlevéeCVSS 7.5

CVE-2014-10076

Défaut de contrôle d'accès dans Database Backup for WordPress (<= 2.2.4)

Plugin: Database Backup for WordPress
Versions: <= 2.2.4
CVSS: 7.5/10
Correctif: 2.3.0

MoyenneCVSS 6.1

CVE-2014-8492

XSS réfléchi dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 2.0.2)

Plugin: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Versions: <= 2.0.2
CVSS: 6.1/10
Correctif: 2.0.3

MoyenneCVSS 5.3

CVE-2014-8491

Divulgation d'informations dans Album and Image Gallery with Lightbox – Flagallery Photo Portfolio (<= 4.25)

Plugin: Album and Image Gallery with Lightbox – Flagallery Photo Portfolio
Versions: <= 4.25
CVSS: 5.3/10
Correctif: 4.25

CP Multi View Events Calendar

CritiqueCVSS 9.8

CVE-2014-8586

Injection SQL dans CP Multi View Events Calendar (<= 1.0.2)

Plugin: CP Multi View Events Calendar
Versions: <= 1.0.2
CVSS: 9.8/10
Correctif: 1.0.2

CritiqueCVSS 9.8

CVE-2014-8739

Téléversement de fichier arbitraire dans Creative Contact Form (<= 1.0.0)

Plugin: Creative Contact Form
Versions: <= 1.0.0
CVSS: 9.8/10
Correctif: 1.0.0

MoyenneCVSS 6.1

CVE-2014-7151

XSS (Cross-Site Scripting) dans NEX-Forms Lite – WordPress Contact Form builder (<= 3.4)

Plugin: NEX-Forms Lite – WordPress Contact Form builder
Versions: <= 3.4
CVSS: 6.1/10
Correctif: 3.4

31141 – 31152 sur 31814 articles