Alertes, guides et veille WordPress.

Filtre par plugin

contact form

Effacer

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 4.3

CVE-2024-2113

CSRF (Cross-Site Request Forgery) dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.8.0)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.8.0
CVSS: 4.3/10
Correctif: 3.8.1

28 mars 2024

Lire

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 4.6

CVE-2024-2108

XSS stocké, authentifié (Auteur+), dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.8.0)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.8.0
CVSS: 4.6/10
Correctif: 3.8.1

28 mars 2024

Lire

CritiqueCVSS 9.9

CVE-2024-30242

Injection SQL, authentifié (Abonné+), dans Contact Form to Any API (<= 1.1.8)

Plugin: Contact Form to Any API
Versions: <= 1.1.8
CVSS: 9.9/10
Correctif: 1.1.9

26 mars 2024

Lire

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

MoyenneCVSS 6.1

CVE-2024-29777

XSS réfléchi dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.29.0)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.29.0
CVSS: 6.1/10
Correctif: 1.29.1

25 mars 2024

Lire

Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More

MoyenneCVSS 6.1

CVE-2024-29759

XSS réfléchi dans Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More (<= 1.2.54)

Plugin: Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
Versions: <= 1.2.54
CVSS: 6.1/10
Correctif: 1.2.55

25 mars 2024

Lire

Smart Forms – when you need more than just a contact form

MoyenneCVSS 4.3

CVE-2024-1307

Défaut de contrôle d'accès dans Smart Forms – when you need more than just a contact form (<= 2.6.93)

Plugin: Smart Forms – when you need more than just a contact form
Versions: <= 2.6.93
CVSS: 4.3/10
Correctif: 2.6.94

25 mars 2024

Lire

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

MoyenneCVSS 5.9

CVE-2024-2112

Faille de sécurité dans Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (<= 1.15.22)

Plugin: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Versions: <= 1.15.22
CVSS: 5.9/10
Correctif: 1.15.23

22 mars 2024

Lire

MoyenneCVSS 6.1

CVE-2024-29130

XSS réfléchi dans Contact Form 7 – PayPal & Stripe Add-on (<= 2.0)

Plugin: Contact Form 7 – PayPal & Stripe Add-on
Versions: <= 2.0
CVSS: 6.1/10
Correctif: 2.1

16 mars 2024

Lire

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent

MoyenneCVSS 6.1

CVE-2024-29110

XSS réfléchi dans Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent (<= 1.0.27)

Plugin: Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent
Versions: <= 1.0.27
CVSS: 6.1/10
Correctif: 1.0.28

16 mars 2024

Lire

ÉlevéeCVSS 7.2

CVE-2024-29117

XSS stocké, non authentifié, dans Contact Forms by Cimatti (<= 1.7.0)

Plugin: Contact Forms by Cimatti
Versions: <= 1.7.0
CVSS: 7.2/10
Correctif: 1.8.0

16 mars 2024

Lire

Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)

ÉlevéeCVSS 7.2

CVE-2024-29102

XSS stocké, non authentifié, dans Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) (<= 3.0.6)

Plugin: Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
Versions: <= 3.0.6
CVSS: 7.2/10
Correctif: 3.0.7

15 mars 2024

Lire

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

ÉlevéeCVSS 7.2

CVE-2024-1812

SSRF (Server-Side Request Forgery), non authentifié, dans Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI (<= 2.0.7)

Plugin: Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
Versions: <= 2.0.7
CVSS: 7.2/10
Correctif: 2.0.8