Se connecter Démarrer

Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31845

Vulnérabilités (CVE)

1

Guides publiés

140

Publiés ce mois-ci

Filtre par plugin

a forms

OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA)

MoyenneCVSS 5.5

CVE-2023-22716

XSS stocké, authentifié, dans OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) (<= 1.1.35)

Plugin: OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA)
Versions: <= 1.1.35
CVSS: 5.5/10
Correctif: 1.1.36

Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms

MoyenneCVSS 6.4

CVE-2023-0096

XSS stocké, authentifié (Contributeur+), dans Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms (<= 1.21.1)

Plugin: Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms
Versions: <= 1.21.1
CVSS: 6.4/10
Correctif: 1.22.0

Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More

MoyenneCVSS 5.4

CVE-2022-45806

CSRF (Cross-Site Request Forgery) dans Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More (<= 5.5.4)

Plugin: Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More
Versions: <= 5.5.4
CVSS: 5.4/10
Correctif: 5.5.5

MoyenneCVSS 4.3

CVE-2022-3343

Défaut de contrôle d'accès, authentifié (Abonné+), dans WPQA - Builder forms Addon For WordPress (<= 5.9.2)

Plugin: WPQA - Builder forms Addon For WordPress
Versions: <= 5.9.2
CVSS: 4.3/10
Correctif: 5.9.3

CritiqueCVSS 9.8

CVE-2022-4049

Injection SQL, non authentifié, dans WP User – Custom Registration Forms, Login and User Profile (<= 7.0)

Plugin: WP User – Custom Registration Forms, Login and User Profile
Versions: <= 7.0
CVSS: 9.8/10
Correctif: Aucun

MoyenneCVSS 5.5

CVE-2022-4519

XSS stocké, authentifié (Administrateur+), dans WP User – Custom Registration Forms, Login and User Profile (<= 7.0)

Plugin: WP User – Custom Registration Forms, Login and User Profile
Versions: <= 7.0
CVSS: 5.5/10
Correctif: Aucun

Paytium: Mollie payment forms & donations

MoyenneCVSS 5.5

CVE-2022-4042

XSS stocké, authentifié, dans Paytium: Mollie payment forms & donations (<= 4.3.6)

Plugin: Paytium: Mollie payment forms & donations
Versions: <= 4.3.6
CVSS: 5.5/10
Correctif: 4.3.7

MoyenneCVSS 6.4

CVE-2022-44631

XSS stocké, authentifié (Auteur+), dans 1app Business Forms (<= 1.0.0)

Plugin: 1app Business Forms
Versions: <= 1.0.0
CVSS: 6.4/10
Correctif: Aucun

ÉlevéeCVSS 7.2

CVE-2022-45838

XSS (Cross-Site Scripting), non authentifié, dans Contact Form, Survey, Quiz & Popup Form Builder – ARForms (<= 1.5.6)

Plugin: Contact Form, Survey, Quiz & Popup Form Builder – ARForms
Versions: <= 1.5.6
CVSS: 7.2/10
Correctif: 1.5.7

Form Vibes – Database Manager for Forms

ÉlevéeCVSS 7.2

CVE-2022-3764

Injection SQL, authentifié, dans Form Vibes – Database Manager for Forms (<= 1.4.5)

Plugin: Form Vibes – Database Manager for Forms
Versions: <= 1.4.5
CVSS: 7.2/10
Correctif: 1.4.6

HTML Forms – Simple WordPress Forms Plugin

ÉlevéeCVSS 7.2

CVE-2022-3689

Injection SQL, authentifié (Administrateur+), dans HTML Forms – Simple WordPress Forms Plugin (<= 1.3.24)

Plugin: HTML Forms – Simple WordPress Forms Plugin
Versions: <= 1.3.24
CVSS: 7.2/10
Correctif: 1.3.25

MoyenneCVSS 5.5

CVE-2022-3834

XSS stocké, authentifié, dans Google Forms (<= 0.95)

Plugin: Google Forms
Versions: <= 0.95
CVSS: 5.5/10
Correctif: Aucun

841 – 852 sur 1029 articles