Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32243

Vulnérabilités (CVE)

1

Guides publiés

145

Publiés ce mois-ci

Filtre par plugin

user profile

ProfileGrid – User Profiles, Groups and Communities

MoyenneCVSS 6.5

CVE-2026-4608

Injection SQL, authentifié (Abonné+), dans ProfileGrid – User Profiles, Groups and Communities (<= 5.9.8.4)

Plugin: ProfileGrid – User Profiles, Groups and Communities
Versions: <= 5.9.8.4
CVSS: 6.5/10
Correctif: 5.9.8.5

ProfileGrid – User Profiles, Groups and Communities

ÉlevéeCVSS 7.1

CVE-2026-4609

Défaut de contrôle d'accès, authentifié (Auteur+), dans ProfileGrid – User Profiles, Groups and Communities (<= 5.9.8.4)

Plugin: ProfileGrid – User Profiles, Groups and Communities
Versions: <= 5.9.8.4
CVSS: 7.1/10
Correctif: 5.9.8.5

ProfileGrid – User Profiles, Groups and Communities

MoyenneCVSS 4.3

CVE-2026-4607

Défaut de contrôle d'accès, authentifié (Auteur+), dans ProfileGrid – User Profiles, Groups and Communities (<= 5.9.8.4)

Plugin: ProfileGrid – User Profiles, Groups and Communities
Versions: <= 5.9.8.4
CVSS: 4.3/10
Correctif: 5.9.8.5

ÉlevéeCVSS 8.8

CVE-2026-5127

Injection d'objet PHP, authentifié (Abonné+), dans User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration (<= 4.3.1)

Plugin: User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
Versions: <= 4.3.1
CVSS: 8.8/10
Correctif: 4.3.2

MoyenneCVSS 4.3

CVE-2026-3601

Défaut de contrôle d'accès, authentifié (Auteur+), dans User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder (<= 5.1.4)

Plugin: User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
Versions: <= 5.1.4
CVSS: 4.3/10
Correctif: 5.1.5

ÉlevéeCVSS 7.5

CVE-2026-7649

Injection SQL, non authentifié, dans ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup (<= 5.5)

Plugin: ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
Versions: <= 5.5
CVSS: 7.5/10
Correctif: 5.6

MoyenneCVSS 5.3

CVE-2026-42412

Défaut de contrôle d'accès dans User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration (<= 4.3.1)

Plugin: User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
Versions: <= 4.3.1
CVSS: 5.3/10
Correctif: 4.3.2

MoyenneCVSS 6.4

CVE-2026-41556

XSS stocké, authentifié (Abonné+), dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.16.13)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.16.13
CVSS: 6.4/10
Correctif: 4.16.14

MoyenneCVSS 6.4

CVE-2026-1559

XSS stocké, authentifié (Abonné+), dans Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress (<= 1.3.6)

Plugin: Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
Versions: <= 1.3.6
CVSS: 6.4/10
Correctif: 1.3.7

MoyenneCVSS 4.3

CVE-2026-4949

Défaut de contrôle d'accès, authentifié (Auteur+), dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.16.12)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.16.12
CVSS: 4.3/10
Correctif: 4.16.13

MoyenneCVSS 4.3

CVE-2025-53444

CSRF (Cross-Site Request Forgery) dans UserPro - Community and User Profile WordPress Plugin (<= 5.1.11)

Plugin: UserPro - Community and User Profile WordPress Plugin
Versions: <= 5.1.11
CVSS: 4.3/10
Correctif: 5.1.11

MoyenneCVSS 6.1

CVE-2026-6203

Redirection ouverte, non authentifié, dans User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder (<= 5.1.4)

Plugin: User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
Versions: <= 5.1.4
CVSS: 6.1/10
Correctif: 5.1.5

25 – 36 sur 410 articles