Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32161

Vulnérabilités (CVE)

Guides publiés

Publiés ce mois-ci

Filtre par plugin

user files

Effacer

MoyenneCVSS 6.1

CVE-2024-30198

XSS réfléchi dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.5)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.5
CVSS: 6.1/10
Correctif: 2.8.6

Téléversement de fichier arbitraire, non authentifié, dans Pie Register – User Registration, Profiles & Content Restriction (<= 3.8.3.2)

Plugin: Pie Register – User Registration, Profiles & Content Restriction
Versions: <= 3.8.3.2
CVSS: 9.8/10
Correctif: 3.8.3.3

Défaut de contrôle d'accès, non authentifié, dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.7)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.7
CVSS: 7.5/10
Correctif: 2.8.8

Défaut de contrôle d'accès dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.7)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.7
CVSS: 4.3/10
Correctif: 2.8.8

Défaut de contrôle d'accès, non authentifié, dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.7)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.7
CVSS: 8.2/10
Correctif: 2.8.8

Défaut de contrôle d'accès dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 3.10.8)

Plugin: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Versions: <= 3.10.8
CVSS: 8.2/10
Correctif: 3.10.9

Défaut de contrôle d'accès dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 3.10.6)

Plugin: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Versions: <= 3.10.6
CVSS: 4.3/10
Correctif: 3.10.8

Défaut de contrôle d'accès dans ProfileGrid – User Profiles, Groups and Communities (<= 5.6.6)

Plugin: ProfileGrid – User Profiles, Groups and Communities
Versions: <= 5.6.6
CVSS: 4.3/10
Correctif: 5.6.7

CSRF (Cross-Site Request Forgery) dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 3.10.3)

Plugin: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Versions: <= 3.10.3
CVSS: 7.1/10
Correctif: 3.10.4

CSRF (Cross-Site Request Forgery) dans ProfileGrid – User Profiles, Groups and Communities (<= 5.7.1)

Plugin: ProfileGrid – User Profiles, Groups and Communities
Versions: <= 5.7.1
CVSS: 4.3/10
Correctif: 5.7.2

Défaut de contrôle d'accès dans Secure Client Portal and Private File Sharing Plugin – User Private Files (<= 2.0.5)

Plugin: Secure Client Portal and Private File Sharing Plugin – User Private Files
Versions: <= 2.0.5
CVSS: 5.3/10
Correctif: 2.0.5

XSS stocké, authentifié, dans Secure Client Portal and Private File Sharing Plugin – User Private Files (<= 2.0.3)

Plugin: Secure Client Portal and Private File Sharing Plugin – User Private Files
Versions: <= 2.0.3
CVSS: 4.4/10
Correctif: 2.0.4

4 sept. 2023

Lire

73 – 84 sur 133 articles