Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32346

Vulnérabilités (CVE)

Guides publiés

248

Publiés ce mois-ci

Filtre par plugin

forms

Effacer

ÉlevéeCVSS 7.2

CVE-2019-25145

Faille de sécurité, non authentifié, dans Contact Form & SMTP Plugin for WordPress by PirateForms (<= 2.5.2)

Plugin: Contact Form & SMTP Plugin for WordPress by PirateForms
Versions: <= 2.5.2
CVSS: 7.2/10
Correctif: 2.5.2

Injection SQL dans Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI (<= 1.5.0)

Plugin: Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
Versions: <= 1.5.0
CVSS: 9.8/10
Correctif: 1.5.0

Faille de sécurité dans Easy Forms for Mailchimp (<= 6.5.3)

Plugin: Easy Forms for Mailchimp
Versions: <= 6.5.3
CVSS: 9.8/10
Correctif: 6.5.3

Faille de sécurité dans Gravity Forms (<= 2.4.8)

Plugin: Gravity Forms
Versions: <= 2.4.8
CVSS: 7.5/10
Correctif: 2.4.9

Téléversement de fichier arbitraire, non authentifié, dans Ninja Forms - File Uploads (<= 3.0.23)

Plugin: Ninja Forms - File Uploads
Versions: <= 3.0.23
CVSS: 8.1/10
Correctif: 3.0.23

CSRF (Cross-Site Request Forgery) dans Smart Forms – when you need more than just a contact form (<= 2.6.26)

Plugin: Smart Forms – when you need more than just a contact form
Versions: <= 2.6.26
CVSS: 8.8/10
Correctif: 2.6.26

Téléversement de fichier arbitraire dans WP Cost Estimation & Payment Forms Builder (<= 9.644)

Plugin: WP Cost Estimation & Payment Forms Builder
Versions: <= 9.644
CVSS: 9.8/10
Correctif: 9.644

Traversée de répertoire dans WP Cost Estimation & Payment Forms Builder (<= 9.660)

Plugin: WP Cost Estimation & Payment Forms Builder
Versions: <= 9.660
CVSS: 6.5/10
Correctif: 9.660

XSS (Cross-Site Scripting) dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.6)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.6
CVSS: 6.1/10
Correctif: 1.6

Injection SQL dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.6)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.6
CVSS: 6.5/10
Correctif: 1.6

Injection SQL dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.21.1)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.21.1
CVSS: 9.8/10
Correctif: 3.3.21.2

Redirection ouverte, authentifié, dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.19)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.19
CVSS: 4.7/10
Correctif: 3.3.19.1

1 déc. 2018

Lire

1009 – 1020 sur 1070 articles