Se connecter Démarrer

Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31786

Vulnérabilités (CVE)

1

Guides publiés

81

Publiés ce mois-ci

Filtre par plugin

a forms

Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More

CritiqueCVSS 9.8

CVE-2019-15780

Injection d'objet PHP dans Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More (<= 4.02.01)

Plugin: Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More
Versions: <= 4.02.01
CVSS: 9.8/10
Correctif: 4.02.01

Contact Form & SMTP Plugin for WordPress by PirateForms

ÉlevéeCVSS 7.2

CVE-2019-25145

Faille de sécurité, non authentifié, dans Contact Form & SMTP Plugin for WordPress by PirateForms (<= 2.5.2)

Plugin: Contact Form & SMTP Plugin for WordPress by PirateForms
Versions: <= 2.5.2
CVSS: 7.2/10
Correctif: 2.5.2

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

CritiqueCVSS 9.8

CVE-2019-13575

Injection SQL dans Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI (<= 1.5.0)

Plugin: Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
Versions: <= 1.5.0
CVSS: 9.8/10
Correctif: 1.5.0

CritiqueCVSS 9.8

CVE-2019-15318

Faille de sécurité dans Easy Forms for Mailchimp (<= 6.5.3)

Plugin: Easy Forms for Mailchimp
Versions: <= 6.5.3
CVSS: 9.8/10
Correctif: 6.5.3

ÉlevéeCVSS 7.5

CVE-2020-13764

Faille de sécurité dans Gravity Forms (<= 2.4.8)

Plugin: Gravity Forms
Versions: <= 2.4.8
CVSS: 7.5/10
Correctif: 2.4.9

ÉlevéeCVSS 8.1

CVE-2019-10869

Téléversement de fichier arbitraire, non authentifié, dans Ninja Forms - File Uploads (<= 3.0.23)

Plugin: Ninja Forms - File Uploads
Versions: <= 3.0.23
CVSS: 8.1/10
Correctif: 3.0.23

Smart Forms – when you need more than just a contact form

ÉlevéeCVSS 8.8

CVE-2019-5924

CSRF (Cross-Site Request Forgery) dans Smart Forms – when you need more than just a contact form (<= 2.6.26)

Plugin: Smart Forms – when you need more than just a contact form
Versions: <= 2.6.26
CVSS: 8.8/10
Correctif: 2.6.26

CritiqueCVSS 9.8

CVE-2019-25296

Téléversement de fichier arbitraire dans WP Cost Estimation & Payment Forms Builder (<= 9.644)

Plugin: WP Cost Estimation & Payment Forms Builder
Versions: <= 9.644
CVSS: 9.8/10
Correctif: 9.644

MoyenneCVSS 6.5

CVE-2019-25295

Traversée de répertoire dans WP Cost Estimation & Payment Forms Builder (<= 9.660)

Plugin: WP Cost Estimation & Payment Forms Builder
Versions: <= 9.660
CVSS: 6.5/10
Correctif: 9.660

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

MoyenneCVSS 6.5

CVE-2019-9568

Injection SQL dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.6)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.6
CVSS: 6.5/10
Correctif: 1.6

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

MoyenneCVSS 6.1

CVE-2019-9567

XSS (Cross-Site Scripting) dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.6)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.6
CVSS: 6.1/10
Correctif: 1.6

Ninja Forms – The Contact Form Builder That Grows With You

CritiqueCVSS 9.8

CVE-2019-15025

Injection SQL dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.21.1)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.21.1
CVSS: 9.8/10
Correctif: 3.3.21.2

961 – 972 sur 1023 articles