Démarrer
MoyenneCVSS 6.1
CVE-2021-25034XSS réfléchi dans WP User – Custom Registration Forms, Login and User Profile (<= 7.0)
- Plugin
- WP User – Custom Registration Forms, Login and User Profile
- Versions
- <= 7.0
- CVSS
- 6.1/10
- Correctif
- 7.0
31 janv. 2022
LireBlog
Alertes, guideset veille WordPress.
Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.
32243
Vulnérabilités (CVE)
1
Guides publiés
145
Publiés ce mois-ci
Filtre par plugin
user profile
MoyenneCVSS 6.4CVE-2022-0233XSS stocké dans ProfileGrid – User Profiles, Groups and Communities (<= 4.7.4)
- Plugin
- ProfileGrid – User Profiles, Groups and Communities
- Versions
- <= 4.7.4
- CVSS
- 6.4/10
- Correctif
- 4.7.7
18 janv. 2022
Lire
ÉlevéeCVSS 8.8CVE-2021-25076Injection SQL dans User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration (<= 3.5.25)
- Plugin
- User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration
- Versions
- <= 3.5.25
- CVSS
- 8.8/10
- Correctif
- 3.5.26
27 déc. 2021
Lire
MoyenneCVSS 6.1CVE-2021-24955XSS réfléchi dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 3.2.3)
- Plugin
- Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
- Versions
- <= 3.2.3
- CVSS
- 6.1/10
- Correctif
- 3.2.3
15 nov. 2021
LireMoyenneCVSS 6.1CVE-2021-24954XSS réfléchi dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 3.2.3)
- Plugin
- Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
- Versions
- <= 3.2.3
- CVSS
- 6.1/10
- Correctif
- 3.2.3
15 nov. 2021
Lire
CritiqueCVSS 9.8CVE-2025-34077Contournement d'authentification dans Pie Register – User Registration, Profiles & Content Restriction (<= 3.7.1.4)
- Plugin
- Pie Register – User Registration, Profiles & Content Restriction
- Versions
- <= 3.7.1.4
- CVSS
- 9.8/10
- Correctif
- 3.7.1.5
11 oct. 2021
LireCritiqueCVSS 9.8CVE-2021-24731Injection SQL, non authentifié, dans Pie Register – User Registration, Profiles & Content Restriction (<= 3.7.1.6)
- Plugin
- Pie Register – User Registration, Profiles & Content Restriction
- Versions
- <= 3.7.1.6
- CVSS
- 9.8/10
- Correctif
- 3.7.1.6
11 oct. 2021
LireÉlevéeCVSS 8.1CVE-2021-24647Contournement d'authentification dans Pie Register – User Registration, Profiles & Content Restriction (<= 3.7.1.6)
- Plugin
- Pie Register – User Registration, Profiles & Content Restriction
- Versions
- <= 3.7.1.6
- CVSS
- 8.1/10
- Correctif
- 3.7.1.6
11 oct. 2021
Lire
ÉlevéeCVSS 7.5CVE-2021-24655Faille de sécurité dans WP User Manager – User Profile Builder & Membership (<= 2.6.2)
- Plugin
- WP User Manager – User Profile Builder & Membership
- Versions
- <= 2.6.2
- CVSS
- 7.5/10
- Correctif
- 2.6.3
22 sept. 2021
Lire
MoyenneCVSS 6.5CVE-2021-24675CSRF (Cross-Site Request Forgery) dans One User Avatar | User Profile Picture (<= 2.3.7)
- Plugin
- One User Avatar | User Profile Picture
- Versions
- <= 2.3.7
- CVSS
- 6.5/10
- Correctif
- 2.3.7
20 sept. 2021
LireMoyenneCVSS 5.4CVE-2021-24672XSS stocké dans One User Avatar | User Profile Picture (<= 2.3.7)
- Plugin
- One User Avatar | User Profile Picture
- Versions
- <= 2.3.7
- CVSS
- 5.4/10
- Correctif
- 2.3.7
20 sept. 2021
LireMoyenneCVSS 5.4CVE-2021-24654XSS stocké, authentifié, dans WP User Manager – User Profile Builder & Membership (<= 2.0.2)
- Plugin
- WP User Manager – User Profile Builder & Membership
- Versions
- <= 2.0.2
- CVSS
- 5.4/10
- Correctif
- 2.0.2
6 sept. 2021
Lire337 – 348 sur 410 articles