Se connecter Démarrer

Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31815

Vulnérabilités (CVE)

1

Guides publiés

110

Publiés ce mois-ci

Filtre par plugin

forms

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 6.4

CVE-2021-34648

Faille de sécurité dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.5.7)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.5.7
CVSS: 6.4/10
Correctif: 3.5.8

Request a Quote – Quote Forms for Any WordPress Site

MoyenneCVSS 4.8

CVE-2021-24489

XSS stocké dans Request a Quote – Quote Forms for Any WordPress Site (<= 2.3.5)

Plugin: Request a Quote – Quote Forms for Any WordPress Site
Versions: <= 2.3.5
CVSS: 4.8/10
Correctif: 2.3.5

MoyenneCVSS 5.5

CVE-2021-24516

XSS stocké, authentifié, dans PlanSo Forms (<= 2.6.4)

Plugin: PlanSo Forms
Versions: <= 2.6.4
CVSS: 5.5/10
Correctif: Aucun

Wise Agent Lead Forms

MoyenneCVSS 6.1

CVE-2021-38335

XSS réfléchi dans Wise Agent Lead Forms (<= 2.0)

Plugin: Wise Agent Lead Forms
Versions: <= 2.0
CVSS: 6.1/10
Correctif: 3.0

MoyenneCVSS 5.5

CVE-2021-24513

XSS stocké, authentifié, dans Form Builder | Create Responsive Contact Forms (<= 1.9.8.3)

Plugin: Form Builder | Create Responsive Contact Forms
Versions: <= 1.9.8.3
CVSS: 5.5/10
Correctif: 1.9.8.4

MoyenneCVSS 5.5

CVE-2021-24596

XSS stocké dans youForms for WordPress – Creating Forms for CopeCart (<= 1.0.5)

Plugin: youForms for WordPress – Creating Forms for CopeCart
Versions: <= 1.0.5
CVSS: 5.5/10
Correctif: 1.0.6

NEX-Forms – Ultimate Forms Plugin for WordPress

MoyenneCVSS 4.3

CVE-2021-34676

Contournement d'authentification dans NEX-Forms – Ultimate Forms Plugin for WordPress (<= 7.8.7)

Plugin: NEX-Forms – Ultimate Forms Plugin for WordPress
Versions: <= 7.8.7
CVSS: 4.3/10
Correctif: 7.8.8

CritiqueCVSS 9.8

CVE-2021-24527

Faille de sécurité dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 3.4.9)

Plugin: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Versions: <= 3.4.9
CVSS: 9.8/10
Correctif: 3.4.9

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

ÉlevéeCVSS 7.2

CVE-2021-36821

XSS stocké, non authentifié, dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.14.12)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.14.12
CVSS: 7.2/10
Correctif: 1.14.12

Forms

MoyenneCVSS 5.5

CVE-2021-24505

XSS stocké, authentifié, dans Forms (<= 1.12.3)

Plugin: Forms
Versions: <= 1.12.3
CVSS: 5.5/10
Correctif: 1.12.3

MoyenneCVSS 5.5

CVE-2021-24448

XSS stocké, authentifié (Administrateur+), dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 3.4.7)

Plugin: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Versions: <= 3.4.7
CVSS: 5.5/10
Correctif: 3.4.8

Request a Quote – Quote Forms for Any WordPress Site

MoyenneCVSS 5.4

CVE-2021-24420

XSS stocké, authentifié, dans Request a Quote – Quote Forms for Any WordPress Site (<= 2.3.4)

Plugin: Request a Quote – Quote Forms for Any WordPress Site
Versions: <= 2.3.4
CVSS: 5.4/10
Correctif: 2.3.4

913 – 924 sur 1025 articles