Se connecter Démarrer

Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31875

Vulnérabilités (CVE)

1

Guides publiés

170

Publiés ce mois-ci

Filtre par plugin

a forms

Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder

ÉlevéeCVSS 8.7

CVE-2024-7782

Suppression de fichier arbitraire dans Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder (2.0 - 2.13.4)

Plugin: Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder
Versions: 2.0 - 2.13.4
CVSS: 8.7/10
Correctif: 2.13.5

WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards

MoyenneCVSS 4.3

CVE-2024-43295

CSRF (Cross-Site Request Forgery) dans WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards (<= 5.5.7)

Plugin: WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards
Versions: <= 5.5.7
CVSS: 4.3/10
Correctif: 5.5.9

FormFacade – Embed Google Forms in your website

MoyenneCVSS 6.1

CVE-2024-43313

XSS réfléchi dans FormFacade – Embed Google Forms in your website (<= 1.3.2)

Plugin: FormFacade – Embed Google Forms in your website
Versions: <= 1.3.2
CVSS: 6.1/10
Correctif: 1.3.3

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

ÉlevéeCVSS 7.2

CVE-2024-43317

XSS stocké, non authentifié, dans RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (<= 6.0.1.0)

Plugin: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Versions: <= 6.0.1.0
CVSS: 7.2/10
Correctif: 6.0.1.1

Advanced Form Integration — Connect Forms to 200+ Apps

MoyenneCVSS 4.3

CVE-2024-43340

CSRF (Cross-Site Request Forgery) dans Advanced Form Integration — Connect Forms to 200+ Apps (<= 1.89.4)

Plugin: Advanced Form Integration — Connect Forms to 200+ Apps
Versions: <= 1.89.4
CVSS: 4.3/10
Correctif: 1.89.6

MoyenneCVSS 4.4

CVE-2024-6708

XSS stocké, authentifié (Éditeur+), dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 3.12.1)

Plugin: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Versions: <= 3.12.1
CVSS: 4.4/10
Correctif: 3.12.2

ÉlevéeCVSS 7.2

CVE-2024-7691

XSS stocké, non authentifié, dans Flaming Forms (<= 1.0.1)

Plugin: Flaming Forms
Versions: <= 1.0.1
CVSS: 7.2/10
Correctif: Aucun

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 6.1

CVE-2024-7354

XSS réfléchi dans Ninja Forms – The Contact Form Builder That Grows With You (3.8.6 - 3.8.10)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: 3.8.6 - 3.8.10
CVSS: 6.1/10
Correctif: 3.8.11

MoyenneCVSS 6.1

CVE-2024-7692

XSS réfléchi dans Flaming Forms (<= 1.0.1)

Plugin: Flaming Forms
Versions: <= 1.0.1
CVSS: 6.1/10
Correctif: Aucun

MoyenneCVSS 6.1

CVE-2024-43233

XSS réfléchi dans BSK Forms Blacklist (<= 3.8)

Plugin: BSK Forms Blacklist
Versions: <= 3.8
CVSS: 6.1/10
Correctif: 3.8.1

PDF Builder for WPForms

MoyenneCVSS 5.3

CVE-2024-7414

Faille de sécurité, non authentifié, dans PDF Builder for WPForms (<= 1.2.116)

Plugin: PDF Builder for WPForms
Versions: <= 1.2.116
CVSS: 5.3/10
Correctif: 1.2.117

CRM Perks Forms – WordPress Form Builder

ÉlevéeCVSS 7.2

CVE-2024-7484

Téléversement de fichier arbitraire, authentifié (Administrateur+), dans CRM Perks Forms – WordPress Form Builder (<= 1.1.3)

Plugin: CRM Perks Forms – WordPress Form Builder
Versions: <= 1.1.3
CVSS: 7.2/10
Correctif: 1.1.4

517 – 528 sur 1030 articles