Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32253

Vulnérabilités (CVE)

Guides publiés

155

Publiés ce mois-ci

Filtre par plugin

Effacer

MoyenneCVSS 6.1

CVE-2022-0471

XSS réfléchi dans Favicon by RealFaviconGenerator (<= 1.3.23)

Plugin: Favicon by RealFaviconGenerator
Versions: <= 1.3.23
CVSS: 6.1/10
Correctif: 1.3.23

XSS stocké, authentifié, dans Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme (<= 2.9.6)

Plugin: Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme
Versions: <= 2.9.6
CVSS: 8.5/10
Correctif: Aucun

XSS réfléchi dans GEO Plugin by Squirrly SEO (<= 11.1.12)

Plugin: GEO Plugin by Squirrly SEO
Versions: <= 11.1.12
CVSS: 6.1/10
Correctif: 11.1.12

Défaut de contrôle d'accès, authentifié (Auteur+), dans Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid (<= 1.14.13)

Plugin: Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid
Versions: <= 1.14.13
CVSS: 4.3/10
Correctif: 1.14.14

Redirection ouverte dans Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme (<= 2.9.6)

Plugin: Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme
Versions: <= 2.9.6
CVSS: 8.8/10
Correctif: Aucun

Injection SQL, non authentifié, dans Photo Gallery by 10Web – Mobile-Friendly Image Gallery (<= 1.6.0)

Plugin: Photo Gallery by 10Web – Mobile-Friendly Image Gallery
Versions: <= 1.6.0
CVSS: 9.8/10
Correctif: 1.6.0

XSS réfléchi dans Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce (<= 11.2.3)

Plugin: Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce
Versions: <= 11.2.3
CVSS: 6.1/10
Correctif: 11.2.3

Faille de sécurité, non authentifié, dans CMP – Coming Soon & Maintenance Plugin by NiteoThemes (<= 4.0.19)

Plugin: CMP – Coming Soon & Maintenance Plugin by NiteoThemes
Versions: <= 4.0.19
CVSS: 5.3/10
Correctif: 4.0.19

CSRF (Cross-Site Request Forgery) dans Error Log Viewer by BestWebSoft (<= 1.1.1)

Plugin: Error Log Viewer by BestWebSoft
Versions: <= 1.1.1
CVSS: 8.8/10
Correctif: 1.1.2

XSS stocké dans Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce (<= 11.0.7)

Plugin: Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce
Versions: <= 11.0.7
CVSS: 5.4/10
Correctif: 11.0.7

XSS réfléchi dans Backup and Staging by WP Time Capsule (<= 1.22.6)

Plugin: Backup and Staging by WP Time Capsule
Versions: <= 1.22.6
CVSS: 6.1/10
Correctif: 1.22.7

XSS stocké, non authentifié, dans Survey Maker by AYS (<= 2.0.6)

Plugin: Survey Maker by AYS
Versions: <= 2.0.6
CVSS: 7.2/10
Correctif: 2.0.7

3 déc. 2021

Lire

973 – 984 sur 1145 articles