Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32268

Vulnérabilités (CVE)

Guides publiés

170

Publiés ce mois-ci

Filtre par plugin

Effacer

MoyenneCVSS 6.1

CVE-2025-26987

XSS réfléchi dans Frontend Admin by DynamiApps (<= 3.25.17)

Plugin: Frontend Admin by DynamiApps
Versions: <= 3.25.17
CVSS: 6.1/10
Correctif: 3.25.18

XSS stocké, authentifié (Administrateur+), dans Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls (<= 5.5.3)

Plugin: Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls
Versions: <= 5.5.3
CVSS: 4.4/10
Correctif: 5.5.4

Injection SQL, authentifié (Administrateur+), dans Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls (<= 5.6.5)

Plugin: Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls
Versions: <= 5.6.5
CVSS: 4.9/10
Correctif: 5.6.6

XSS réfléchi dans Web Accessibility by accessiBe (<= 2.5)

Plugin: Web Accessibility by accessiBe
Versions: <= 2.5
CVSS: 6.1/10
Correctif: 2.6

CSRF (Cross-Site Request Forgery) dans Ecwid by Lightspeed Ecommerce Shopping Cart (<= 6.12.27)

Plugin: Ecwid by Lightspeed Ecommerce Shopping Cart
Versions: <= 6.12.27
CVSS: 4.3/10
Correctif: 6.12.28

XSS stocké dans Contact Us By Lord Linus (<= 2.6)

Plugin: Contact Us By Lord Linus
Versions: <= 2.6
CVSS: 6.1/10
Correctif: Aucun

XSS stocké, authentifié (Administrateur+), dans BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net (<= 1.1.4.4)

Plugin: BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net
Versions: <= 1.1.4.4
CVSS: 5.5/10
Correctif: 1.1.4.5

Injection d'objet PHP, authentifié (Éditeur+), dans Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider (<= 3.94.0)

Plugin: Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider
Versions: <= 3.94.0
CVSS: 7.2/10
Correctif: 3.95.0

XSS stocké dans Related Posts Line-up-Exactly by Milliard (<= 0.0.22)

Plugin: Related Posts Line-up-Exactly by Milliard
Versions: <= 0.0.22
CVSS: 6.1/10
Correctif: Aucun

XSS stocké, authentifié (Contributeur+), dans Liveticker (by stklcode) (<= 1.2.2)

Plugin: Liveticker (by stklcode)
Versions: <= 1.2.2
CVSS: 6.4/10
Correctif: 1.2.3

XSS stocké, authentifié, dans Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (<= 1.15.32)

Plugin: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Versions: <= 1.15.32
CVSS: 4.4/10
Correctif: 1.15.33

Lecture de fichier arbitraire, authentifié (Contributeur+), dans Post and Page Builder by BoldGrid – Visual Drag and Drop Editor (<= 1.27.6)

Plugin: Post and Page Builder by BoldGrid – Visual Drag and Drop Editor
Versions: <= 1.27.6
CVSS: 6.5/10
Correctif: 1.27.7

5 févr. 2025

Lire

385 – 396 sur 1146 articles