Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32253

Vulnérabilités (CVE)

Guides publiés

155

Publiés ce mois-ci

Filtre par plugin

Effacer

Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder

ÉlevéeCVSS 7.2

CVE-2022-3300

Injection SQL, authentifié (Administrateur+), dans Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (<= 1.15.5)

Plugin: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Versions: <= 1.15.5
CVSS: 7.2/10
Correctif: 1.15.6

XSS stocké, authentifié (Administrateur+), dans Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider (3.27.8 - 3.27.8)

Plugin: Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider
Versions: 3.27.8 - 3.27.8
CVSS: 5.5/10
Correctif: 3.27.9

CSRF (Cross-Site Request Forgery) dans Rate My Post – Star Rating Plugin by FeedbackWP (<= 3.3.4)

Plugin: Rate My Post – Star Rating Plugin by FeedbackWP
Versions: <= 3.3.4
CVSS: 8.8/10
Correctif: 3.3.5

CSRF (Cross-Site Request Forgery) dans Read more By Adam (<= 1.1.8)

Plugin: Read more By Adam
Versions: <= 1.1.8
CVSS: 8.8/10
Correctif: Aucun

Faille de sécurité dans Rate My Post – Star Rating Plugin by FeedbackWP (<= 3.3.4)

Plugin: Rate My Post – Star Rating Plugin by FeedbackWP
Versions: <= 3.3.4
CVSS: 4.3/10
Correctif: 3.3.5

Défaut de contrôle d'accès dans Video Gallery – YouTube Playlist, Channel Gallery by YotuWP (<= 1.3.8)

Plugin: Video Gallery – YouTube Playlist, Channel Gallery by YotuWP
Versions: <= 1.3.8
CVSS: 5.3/10
Correctif: 1.3.9

XSS stocké, authentifié (Administrateur+), dans Currency Switcher for WooCommerce by WBW (<= 1.6.5)

Plugin: Currency Switcher for WooCommerce by WBW
Versions: <= 1.6.5
CVSS: 5.5/10
Correctif: 1.6.6

XSS stocké, authentifié, dans WP Database Backup – Unlimited Database & Files Backup by Backup for WP (<= 5.8.3)

Plugin: WP Database Backup – Unlimited Database & Files Backup by Backup for WP
Versions: <= 5.8.3
CVSS: 5.5/10
Correctif: 5.9

CSRF (Cross-Site Request Forgery) dans Rich Reviews by Starfish (<= 1.9.14)

Plugin: Rich Reviews by Starfish
Versions: <= 1.9.14
CVSS: 8.8/10
Correctif: 1.9.15

XSS stocké, authentifié (Administrateur+), dans WordPress Flipbook by Supsystic (<= 1.7.3)

Plugin: WordPress Flipbook by Supsystic
Versions: <= 1.7.3
CVSS: 5.5/10
Correctif: 1.7.4

CSRF (Cross-Site Request Forgery) dans Ecwid by Lightspeed Ecommerce Shopping Cart (<= 6.10.23)

Plugin: Ecwid by Lightspeed Ecommerce Shopping Cart
Versions: <= 6.10.23
CVSS: 8.8/10
Correctif: 6.10.24

XSS (Cross-Site Scripting) dans Data Tables Generator by Supsystic (<= 1.10.19)

Plugin: Data Tables Generator by Supsystic
Versions: <= 1.10.19
CVSS: 5.5/10
Correctif: 1.10.20

22 juin 2022

Lire

937 – 948 sur 1145 articles