Se connecter Démarrer

Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31845

Vulnérabilités (CVE)

1

Guides publiés

140

Publiés ce mois-ci

Filtre par plugin

a forms

Advanced Form Integration — Connect Forms to 200+ Apps

MoyenneCVSS 6.6

CVE-2023-50853

Injection SQL, authentifié (Administrateur+), dans Advanced Form Integration — Connect Forms to 200+ Apps (<= 1.76.0)

Plugin: Advanced Form Integration — Connect Forms to 200+ Apps
Versions: <= 1.76.0
CVSS: 6.6/10
Correctif: 1.76.0

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

MoyenneCVSS 6.6

CVE-2023-50846

Injection SQL, authentifié (Administrateur+), dans RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (<= 5.2.4.6)

Plugin: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Versions: <= 5.2.4.6
CVSS: 6.6/10
Correctif: 5.2.4.6

Keap Official Opt-in Forms

MoyenneCVSS 4.4

CVE-2023-6941

XSS stocké, authentifié, dans Keap Official Opt-in Forms (<= 1.0.11)

Plugin: Keap Official Opt-in Forms
Versions: <= 1.0.11
CVSS: 4.4/10
Correctif: 1.0.12

HTML Forms – Simple WordPress Forms Plugin

MoyenneCVSS 5.5

CVE-2023-50836

XSS (Cross-Site Scripting), authentifié (Administrateur+), dans HTML Forms – Simple WordPress Forms Plugin (<= 1.3.28)

Plugin: HTML Forms – Simple WordPress Forms Plugin
Versions: <= 1.3.28
CVSS: 5.5/10
Correctif: 1.3.30

NEX-Forms – Ultimate Forms Plugin for WordPress

MoyenneCVSS 5.5

CVE-2023-50838

Injection SQL, authentifié, dans NEX-Forms – Ultimate Forms Plugin for WordPress (<= 8.5.5)

Plugin: NEX-Forms – Ultimate Forms Plugin for WordPress
Versions: <= 8.5.5
CVSS: 5.5/10
Correctif: 8.5.6

MoyenneCVSS 4.4

CVE-2023-4925

XSS stocké, authentifié, dans Easy Forms for Mailchimp (<= 6.8.10)

Plugin: Easy Forms for Mailchimp
Versions: <= 6.8.10
CVSS: 4.4/10
Correctif: Aucun

Smart Forms – when you need more than just a contact form

ÉlevéeCVSS 8.8

CVE-2023-49856

Défaut de contrôle d'accès, authentifié (Auteur+), dans Smart Forms – when you need more than just a contact form (<= 2.6.84)

Plugin: Smart Forms – when you need more than just a contact form
Versions: <= 2.6.84
CVSS: 8.8/10
Correctif: 2.6.85

Optin Forms – Simple List Building Plugin for WordPress

MoyenneCVSS 4.4

CVE-2023-49841

XSS stocké, authentifié (Administrateur+), dans Optin Forms – Simple List Building Plugin for WordPress (<= 1.3.6)

Plugin: Optin Forms – Simple List Building Plugin for WordPress
Versions: <= 1.3.6
CVSS: 4.4/10
Correctif: 1.3.7

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

MoyenneCVSS 5.3

CVE-2023-49831

Défaut de contrôle d'accès dans RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (<= 5.2.3.0)

Plugin: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Versions: <= 5.2.3.0
CVSS: 5.3/10
Correctif: 5.2.3.1

Piotnet Forms

ÉlevéeCVSS 8.1

CVE-2023-6220

Téléversement de fichier arbitraire, non authentifié, dans Piotnet Forms (<= 1.0.28)

Plugin: Piotnet Forms
Versions: <= 1.0.28
CVSS: 8.1/10
Correctif: 1.0.29

MoyenneCVSS 6.1

CVE-2023-49170

XSS réfléchi dans Forms by CaptainForm – Form Builder for WordPress (<= 2.5.3)

Plugin: Forms by CaptainForm – Form Builder for WordPress
Versions: <= 2.5.3
CVSS: 6.1/10
Correctif: Aucun

Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls

MoyenneCVSS 6.4

CVE-2023-45609

XSS stocké, authentifié (Contributeur+), dans Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls (<= 2.1.0)

Plugin: Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls
Versions: <= 2.1.0
CVSS: 6.4/10
Correctif: 2.2.0

697 – 708 sur 1029 articles