Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31756

Vulnérabilités (CVE)

Guides publiés

Publiés ce mois-ci

MoyenneCVSS 6.1

CVE-2011-4624

XSS (Cross-Site Scripting) dans Album and Image Gallery with Lightbox – Flagallery Photo Portfolio (<= 1.57)

Plugin: Album and Image Gallery with Lightbox – Flagallery Photo Portfolio
Versions: <= 1.57
CVSS: 6.1/10
Correctif: 1.57

XSS réfléchi dans ZooEffect Plugin for Video player, Photo Gallery Slideshow jQuery and audio / music / podcast – HTML5 (<= 1.11)

Plugin: ZooEffect Plugin for Video player, Photo Gallery Slideshow jQuery and audio / music / podcast – HTML5
Versions: <= 1.11
CVSS: 6.1/10
Correctif: Aucun

XSS (Cross-Site Scripting) dans Skysa App Bar Integration (<= 1.03)

Plugin: Skysa App Bar Integration
Versions: <= 1.03
CVSS: 7.1/10
Correctif: 1.04

XSS (Cross-Site Scripting) dans Featurific For WordPress (<= 1.6.2)

Plugin: Featurific For WordPress
Versions: <= 1.6.2
CVSS: 6.1/10
Correctif: Aucun

XSS (Cross-Site Scripting) dans Live Chat from ClickDesk – Live Chat – Help Desk Plugin for Websites (<= 2.0)

Plugin: Live Chat from ClickDesk – Live Chat – Help Desk Plugin for Websites
Versions: <= 2.0
CVSS: 6.1/10
Correctif: 3.0

XSS (Cross-Site Scripting) dans Alert Before Your Post (<= 0.1.1)

Plugin: Alert Before Your Post
Versions: <= 0.1.1
CVSS: 6.1/10
Correctif: Aucun

XSS stocké dans WP eCommerce (<= 3.8.7.2)

Plugin: WP eCommerce
Versions: <= 3.8.7.2
CVSS: 5.3/10
Correctif: 3.8.7.2

XSS (Cross-Site Scripting) dans Flexible Custom Post Type (<= 0.1.7)

Plugin: Flexible Custom Post Type
Versions: <= 0.1.7
CVSS: 6.1/10
Correctif: 0.1.7

Injection SQL dans AdRotate Banner Manager (<= 3.6.8)

Plugin: AdRotate Banner Manager
Versions: <= 3.6.8
CVSS: 9.8/10
Correctif: 3.6.8

Injection SQL dans WPtouch – Make your WordPress Website Mobile-Friendly (<= 1.9.8.1)

Plugin: WPtouch – Make your WordPress Website Mobile-Friendly
Versions: <= 1.9.8.1
CVSS: 7.3/10
Correctif: 1.9.8.1

CSRF (Cross-Site Request Forgery) dans User Access Manager (<= 1.2)

Plugin: User Access Manager
Versions: <= 1.2
CVSS: 8.8/10
Correctif: 1.2

Injection SQL dans WordPress Users (<= 1.3)

Plugin: WordPress Users
Versions: <= 1.3
CVSS: 9.8/10
Correctif: 1.4

7 oct. 2011

Lire

31633 – 31644 sur 31755 articles