Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32 961

Vulnérabilités (CVE)

Guides publiés

215

Publiés ce mois-ci

Filtre par plugin

forms

Effacer

MoyenneCVSS 4.4

CVE-2023-5980

XSS stocké, authentifié, dans BSK Forms Blacklist (<= 3.6.3)

Plugin: BSK Forms Blacklist
Versions: <= 3.6.3
CVSS: 4.4/10
Correctif: 3.7

CSRF (Cross-Site Request Forgery) dans RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (<= 5.2.2.6)

Plugin: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Versions: <= 5.2.2.6
CVSS: 4.3/10
Correctif: 5.2.3.0

XSS réfléchi dans Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms (<= 1.25.9)

Plugin: Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms
Versions: <= 1.25.9
CVSS: 6.1/10
Correctif: 1.25.10

Téléversement de fichier arbitraire, authentifié (Administrateur+), dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.27.0)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.27.0
CVSS: 6.6/10
Correctif: 1.28.0

Redirection ouverte dans Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms (<= 1.1.4)

Plugin: Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms
Versions: <= 1.1.4
CVSS: 4.7/10
Correctif: 1.1.5

XSS stocké, authentifié (Contributeur+), dans Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls (<= 2.1.0)

Plugin: Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls
Versions: <= 2.1.0
CVSS: 6.4/10
Correctif: 2.2.0

Défaut de contrôle d'accès dans Flo Forms – Easy Drag & Drop Form Builder (<= 1.0.41)

Plugin: Flo Forms – Easy Drag & Drop Form Builder
Versions: <= 1.0.41
CVSS: 4.3/10
Correctif: 1.0.42

CSRF (Cross-Site Request Forgery) dans Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions (<= 7.0.17)

Plugin: Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions
Versions: <= 7.0.17
CVSS: 4.3/10
Correctif: 7.0.18

XSS stocké, authentifié (Éditeur+), dans Forms for Mailchimp by Optin Cat – Grow Your MailChimp List (<= 2.5.4)

Plugin: Forms for Mailchimp by Optin Cat – Grow Your MailChimp List
Versions: <= 2.5.4
CVSS: 5.5/10
Correctif: 2.5.5

CSRF (Cross-Site Request Forgery) dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 3.10.3)

Plugin: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Versions: <= 3.10.3
CVSS: 7.1/10
Correctif: 3.10.4

Défaut de contrôle d'accès dans Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free (<= 3.4)

Plugin: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Versions: <= 3.4
CVSS: 4.3/10
Correctif: 3.4.2

CSRF (Cross-Site Request Forgery) dans Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free (<= 3.4)

Plugin: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Versions: <= 3.4
CVSS: 6.5/10
Correctif: 3.4.2

1 nov. 2023

Lire

793 – 804 sur 1111 articles

Votre site est-il exposé ?

Analysez-le gratuitement. En-têtes de sécurité, fichiers exposés et version détectable, en quelques secondes.

Analyser mon site gratuitement