Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31875

Vulnérabilités (CVE)

Guides publiés

170

Publiés ce mois-ci

Filtre par plugin

a forms

Effacer

Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More

MoyenneCVSS 6.4

CVE-2024-47633

XSS stocké, authentifié (Contributeur+), dans Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More (<= 4.0)

Plugin: Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More
Versions: <= 4.0
CVSS: 6.4/10
Correctif: 4.0.1

Injection SQL, authentifié (Administrateur+), dans Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder (<= 2.13.11)

Plugin: Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder
Versions: <= 2.13.11
CVSS: 4.9/10
Correctif: 2.13.12

Téléversement de fichier arbitraire, authentifié (Administrateur+), dans Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder (<= 2.13.10)

Plugin: Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder
Versions: <= 2.13.10
CVSS: 7.2/10
Correctif: 2.13.11

XSS (Cross-Site Scripting) dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.8.15)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.8.15
CVSS: 4.7/10
Correctif: 3.8.16

XSS stocké, non authentifié, dans CubeWP Forms (<= 1.1.1)

Plugin: CubeWP Forms
Versions: <= 1.1.1
CVSS: 7.2/10
Correctif: 1.1.2

XSS stocké, non authentifié, dans Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder (<= 2.13.10)

Plugin: Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder
Versions: <= 2.13.10
CVSS: 7.2/10
Correctif: 2.13.11

XSS stocké, authentifié (Contributeur+), dans MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. (<= 1.2.70.3)

Plugin: MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.
Versions: <= 1.2.70.3
CVSS: 5.4/10
Correctif: 1.2.70.4

Élévation de privilèges, authentifié (Contributeur+), dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.11)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.11
CVSS: 8.8/10
Correctif: 2.8.12

XSS réfléchi dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.34.0)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.34.0
CVSS: 6.1/10
Correctif: 1.34.1

XSS stocké, non authentifié, dans Ninja Forms - File Uploads (<= 3.3.16)

Plugin: Ninja Forms - File Uploads
Versions: <= 3.3.16
CVSS: 7.2/10
Correctif: 3.3.18

Défaut de contrôle d'accès dans Form Vibes – Database Manager for Forms (<= 1.4.12)

Plugin: Form Vibes – Database Manager for Forms
Versions: <= 1.4.12
CVSS: 5.4/10
Correctif: 1.4.13

Défaut de contrôle d'accès, authentifié (Auteur+), dans Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder (<= 5.1.18)

Plugin: Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
Versions: <= 5.1.18
CVSS: 4.2/10
Correctif: 5.1.19

31 août 2024

Lire

493 – 504 sur 1030 articles