Plugin: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Versions: <= 5.2.1.0
CVSS: 9.8/10
Correctif: 5.2.1.1

15 mai 2023

Lire

MoyenneCVSS 6.6

CVE-2023-2548

Défaut de contrôle d'accès, authentifié, dans RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (<= 5.2.0.5)

Plugin: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Versions: <= 5.2.0.5
CVSS: 6.6/10
Correctif: 5.2.1.0

XSS stocké, authentifié (Éditeur+), dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.1)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.1
CVSS: 6.4/10
Correctif: 2.8.2

Traversée de répertoire dans Snow Monkey Forms (<= 5.1.1)

Plugin: Snow Monkey Forms
Versions: <= 5.1.1
CVSS: 5.3/10
Correctif: 5.1.2

Redirection ouverte dans Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms (<= 1.2.8)

Plugin: Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms
Versions: <= 1.2.8
CVSS: 4.3/10
Correctif: 1.2.9

XSS réfléchi dans Forms Ada – Form Builder (<= 1.0)

Plugin: Forms Ada – Form Builder
Versions: <= 1.0
CVSS: 6.1/10
Correctif: Aucun

XSS réfléchi dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.6.21)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.6.21
CVSS: 6.1/10
Correctif: 3.6.22

Injection SQL, authentifié (Administrateur+), dans BSK Forms Blacklist (<= 3.6.2)

Plugin: BSK Forms Blacklist
Versions: <= 3.6.2
CVSS: 7.2/10
Correctif: 3.6.3

XSS réfléchi dans Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent (<= 1.0.9)

Plugin: Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent
Versions: <= 1.0.9
CVSS: 6.1/10
Correctif: 1.0.9

Exécution de code à distance (RCE), non authentifié, dans Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder (<= 1.8.1)

Plugin: Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder
Versions: <= 1.8.1
CVSS: 9.8/10
Correctif: 1.9

19 avr. 2023

Lire

793 – 804 sur 1029 articles