Alertes, guideset veille WordPress.

Filtre par plugin

wp opt in

Effacer

WP Compress – Instant Performance & Speed Optimization

MoyenneCVSS 6.5

CVE-2024-4445

Défaut de contrôle d'accès dans WP Compress – Instant Performance & Speed Optimization (<= 6.20.01)

Plugin: WP Compress – Instant Performance & Speed Optimization
Versions: <= 6.20.01
CVSS: 6.5/10
Correctif: 6.20.02

13 mai 2024

Lire

WP Compress – Instant Performance & Speed Optimization

MoyenneCVSS 4.3

CVE-2024-32106

CSRF (Cross-Site Request Forgery) dans WP Compress – Instant Performance & Speed Optimization (<= 6.10.35)

Plugin: WP Compress – Instant Performance & Speed Optimization
Versions: <= 6.10.35
CVSS: 4.3/10
Correctif: 6.11.01

11 avr. 2024

Lire

WP Compress – Instant Performance & Speed Optimization

ÉlevéeCVSS 7.5

CVE-2024-1934

Défaut de contrôle d'accès, non authentifié, dans WP Compress – Instant Performance & Speed Optimization (<= 6.11.10)

Plugin: WP Compress – Instant Performance & Speed Optimization
Versions: <= 6.11.10
CVSS: 7.5/10
Correctif: 6.11.11

21 mars 2024

Lire

MoyenneCVSS 6.4

CVE-2024-2336

XSS stocké, authentifié (Contributeur+), dans Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder (<= 1.18.2)

Plugin: Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder
Versions: <= 1.18.2
CVSS: 6.4/10
Correctif: 1.18.3

20 mars 2024

Lire

WP Compress – Instant Performance & Speed Optimization

CritiqueCVSS 9.1

CVE-2023-6699

Traversée de répertoire, non authentifié, dans WP Compress – Instant Performance & Speed Optimization (<= 6.10.33)

Plugin: WP Compress – Instant Performance & Speed Optimization
Versions: <= 6.10.33
CVSS: 9.1/10
Correctif: 6.10.34

3 janv. 2024

Lire

MoyenneCVSS 5.3

CVE-2023-51408

Faille de sécurité dans WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce (<= 1.4.2)

Plugin: WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce
Versions: <= 1.4.2
CVSS: 5.3/10
Correctif: 1.4.3

27 déc. 2023

Lire

MoyenneCVSS 5.3

CVE-2022-47597

Divulgation d'informations dans Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder (<= 1.17.1)

Plugin: Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder
Versions: <= 1.17.1
CVSS: 5.3/10
Correctif: 1.18.0

14 mars 2023

Lire

MoyenneCVSS 5.4

CVE-2022-45819

Défaut de contrôle d'accès dans Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder (<= 1.17.1)

Plugin: Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder
Versions: <= 1.17.1
CVSS: 5.4/10
Correctif: 1.18.0

9 mars 2023

Lire

MoyenneCVSS 5.5

CVE-2022-3690

XSS stocké, authentifié (Administrateur+), dans Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder (<= 1.16.10)

Plugin: Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder
Versions: <= 1.16.10
CVSS: 5.5/10
Correctif: 1.16.11

31 oct. 2022

Lire

MoyenneCVSS 6.4

CVE-2022-4381

XSS (Cross-Site Scripting), authentifié (Contributeur+), dans Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder (<= 1.16.8)

Plugin: Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder
Versions: <= 1.16.8
CVSS: 6.4/10
Correctif: 1.16.9

26 sept. 2022

Lire

MoyenneCVSS 6.4

CVE-2022-4362

XSS stocké, authentifié (Contributeur+), dans Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder (<= 1.16.8)

Plugin: Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder
Versions: <= 1.16.8
CVSS: 6.4/10
Correctif: 1.16.9

23 sept. 2022

Lire

ÉlevéeCVSS 8.8

CVE-2022-2123

CSRF (Cross-Site Request Forgery) dans WP Opt-in (<= 1.4.1)

Plugin: WP Opt-in
Versions: <= 1.4.1
CVSS: 8.8/10
Correctif: Aucun