Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32054

Vulnérabilités (CVE)

Guides publiés

349

Publiés ce mois-ci

Filtre par plugin

pop up

Effacer

ÉlevéeCVSS 8.8

CVE-2021-24458

Injection SQL, authentifié, dans Popup Box – Create Countdown, Coupon, Video, Contact Form Popups (<= 2.3.4)

Plugin: Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
Versions: <= 2.3.4
CVSS: 8.8/10
Correctif: 2.3.4

Injection SQL dans Popup Like box – Page Plugin (<= 3.5.2)

Plugin: Popup Like box – Page Plugin
Versions: <= 3.5.2
CVSS: 8.8/10
Correctif: 3.5.3

XSS stocké dans YouTube Embed, Playlist and Popup by WpDevArt (<= 2.3.9)

Plugin: YouTube Embed, Playlist and Popup by WpDevArt
Versions: <= 2.3.9
CVSS: 6.4/10
Correctif: 2.3.9

XSS réfléchi dans Smart Popup by Supsystic (<= 1.10.4)

Plugin: Smart Popup by Supsystic
Versions: <= 1.10.4
CVSS: 6.1/10
Correctif: 1.10.5

XSS réfléchi dans Popup Builder – Create highly converting, mobile friendly marketing popups. (<= 3.73)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: <= 3.73
CVSS: 6.1/10
Correctif: 3.74

CSRF (Cross-Site Request Forgery) dans NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar (<= 1.8.3)

Plugin: NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
Versions: <= 1.8.3
CVSS: 4.3/10
Correctif: 1.8.3

CSRF (Cross-Site Request Forgery) dans Advanced Popups (<= 1.1.1)

Plugin: Advanced Popups
Versions: <= 1.1.1
CVSS: 4.3/10
Correctif: 1.1.2

Défaut de contrôle d'accès dans Login & Register Forms – Popup | Slider | Inline | WooCommerce (<= 1.5)

Plugin: Login & Register Forms – Popup | Slider | Inline | WooCommerce
Versions: <= 1.5
CVSS: 7.4/10
Correctif: 1.5

Faille de sécurité, authentifié, dans Popup Builder – Create highly converting, mobile friendly marketing popups. (<= 3.63)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: <= 3.63
CVSS: 6.3/10
Correctif: 3.64.1

XSS stocké, non authentifié, dans Popup Builder – Create highly converting, mobile friendly marketing popups. (<= 3.63)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: <= 3.63
CVSS: 8.3/10
Correctif: 3.64.1

Injection d'objet PHP dans Popup Builder – Create highly converting, mobile friendly marketing popups. (2.2.8 - 2.6.7.6)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: 2.2.8 - 2.6.7.6
CVSS: 9.8/10
Correctif: 3.0

Divulgation d'informations, non authentifié, dans Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder (<= 1.8.12)

Plugin: Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder
Versions: <= 1.8.12
CVSS: 7.5/10
Correctif: 1.8.13

14 oct. 2019

Lire

409 – 420 sur 433 articles