Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31940

Vulnérabilités (CVE)

1

Guides publiés

235

Publiés ce mois-ci

Filtre par plugin

shopp

WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping

ÉlevéeCVSS 7.2

CVE-2024-3067

Injection SQL, authentifié, dans WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping (<= 2.4.2)

Plugin: WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping
Versions: <= 2.4.2
CVSS: 7.2/10
Correctif: 2.6.0

GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels

MoyenneCVSS 4.3

CVE-2024-32519

Défaut de contrôle d'accès dans GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels (<= 1.2.6)

Plugin: GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels
Versions: <= 1.2.6
CVSS: 4.3/10
Correctif: 1.2.7

Shopping Cart & eCommerce Store

MoyenneCVSS 4.3

CVE-2024-32452

CSRF (Cross-Site Request Forgery) dans Shopping Cart & eCommerce Store (<= 5.5.19)

Plugin: Shopping Cart & eCommerce Store
Versions: <= 5.5.19
CVSS: 4.3/10
Correctif: 5.6.0

Shopping Cart & eCommerce Store

ÉlevéeCVSS 8.8

CVE-2024-3211

Injection SQL, authentifié (Contributeur+), dans Shopping Cart & eCommerce Store (<= 5.6.3)

Plugin: Shopping Cart & eCommerce Store
Versions: <= 5.6.3
CVSS: 8.8/10
Correctif: 5.6.4

Ecwid by Lightspeed Ecommerce Shopping Cart

MoyenneCVSS 6.4

CVE-2024-2456

XSS stocké, authentifié (Contributeur+), dans Ecwid by Lightspeed Ecommerce Shopping Cart (<= 6.12.10)

Plugin: Ecwid by Lightspeed Ecommerce Shopping Cart
Versions: <= 6.12.10
CVSS: 6.4/10
Correctif: 6.12.11

WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping

MoyenneCVSS 5.5

CVE-2024-29112

XSS stocké, authentifié, dans WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping (<= 2.2.0)

Plugin: WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping
Versions: <= 2.2.0
CVSS: 5.5/10
Correctif: 2.3.0

Simple Shopping Cart

MoyenneCVSS 4.4

CVE-2023-6497

XSS stocké, authentifié (Administrateur+), dans Simple Shopping Cart (<= 4.7.1)

Plugin: Simple Shopping Cart
Versions: <= 4.7.1
CVSS: 4.4/10
Correctif: 4.7.2

Taggbox – Free Social Media Widgets, Review Badges & Shoppable UGC

CritiqueCVSS 9.8

CVE-2023-52225

Injection d'objet PHP, non authentifié, dans Taggbox – Free Social Media Widgets, Review Badges & Shoppable UGC (<= 3.1)

Plugin: Taggbox – Free Social Media Widgets, Review Badges & Shoppable UGC
Versions: <= 3.1
CVSS: 9.8/10
Correctif: 3.2

GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels

MoyenneCVSS 6.5

CVE-2023-6638

Défaut de contrôle d'accès, non authentifié, dans GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels (<= 1.2.4)

Plugin: GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels
Versions: <= 1.2.4
CVSS: 6.5/10
Correctif: 1.2.5

Ecwid by Lightspeed Ecommerce Shopping Cart

MoyenneCVSS 4.3

CVE-2023-51533

CSRF (Cross-Site Request Forgery) dans Ecwid by Lightspeed Ecommerce Shopping Cart (<= 6.12.4)

Plugin: Ecwid by Lightspeed Ecommerce Shopping Cart
Versions: <= 6.12.4
CVSS: 4.3/10
Correctif: 6.12.5

Easy PayPal Shopping Cart

MoyenneCVSS 6.4

CVE-2023-47239

XSS stocké, authentifié (Contributeur+), dans Easy PayPal Shopping Cart (<= 1.1.10)

Plugin: Easy PayPal Shopping Cart
Versions: <= 1.1.10
CVSS: 6.4/10
Correctif: 1.1.11

Taggbox – Free Social Media Widgets, Review Badges & Shoppable UGC

MoyenneCVSS 5.4

CVE-2023-33215

Défaut de contrôle d'accès dans Taggbox – Free Social Media Widgets, Review Badges & Shoppable UGC (<= 3.3)

Plugin: Taggbox – Free Social Media Widgets, Review Badges & Shoppable UGC
Versions: <= 3.3
CVSS: 5.4/10
Correctif: 3.4

49 – 60 sur 95 articles