Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32346

Vulnérabilités (CVE)

Guides publiés

248

Publiés ce mois-ci

Filtre par plugin

forms

Effacer

CritiqueCVSS 9.8

CVE-2017-20208

Injection d'objet PHP dans RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (<= 3.7.9.3)

Plugin: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Versions: <= 3.7.9.3
CVSS: 9.8/10
Correctif: 3.7.9.3

XSS (Cross-Site Scripting) dans Contact Form, Drag and Drop Form Builder Plugin – Live Forms (<= 3.4.0)

Plugin: Contact Form, Drag and Drop Form Builder Plugin – Live Forms
Versions: <= 3.4.0
CVSS: 6.1/10
Correctif: 3.4.0

XSS (Cross-Site Scripting) dans cformsII (<= 14.13.2)

Plugin: cformsII
Versions: <= 14.13.2
CVSS: 6.1/10
Correctif: 14.13.3

Injection SQL, authentifié, dans cformsII (<= 14.13)

Plugin: cformsII
Versions: <= 14.13
CVSS: 7.2/10
Correctif: 14.13

XSS réfléchi dans Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website (<= 1.2.1)

Plugin: Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website
Versions: <= 1.2.1
CVSS: 6.1/10
Correctif: 1.2.1

Faille de sécurité dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.0.31)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.0.31
CVSS: 6.1/10
Correctif: 3.0.31

XSS réfléchi dans Vospari Forms (<= 1.4)

Plugin: Vospari Forms
Versions: <= 1.4
CVSS: 6.1/10
Correctif: 1.4

XSS réfléchi dans Infusionsoft Gravity Forms Add-on (<= 1.5.12)

Plugin: Infusionsoft Gravity Forms Add-on
Versions: <= 1.5.12
CVSS: 6.1/10
Correctif: 1.5.12

XSS (Cross-Site Scripting) dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 2.4.2)

Plugin: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Versions: <= 2.4.2
CVSS: 6.1/10
Correctif: 2.4.2

Injection d'objet PHP dans Ninja Forms – The Contact Form Builder That Grows With You (2.9.36 - 2.9.42)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: 2.9.36 - 2.9.42
CVSS: 8.1/10
Correctif: 2.9.42.1

Injection SQL dans Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More (<= 1.07.11)

Plugin: Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More
Versions: <= 1.07.11
CVSS: 8.8/10
Correctif: 2.0

XSS réfléchi dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 2.2.5)

Plugin: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Versions: <= 2.2.5
CVSS: 6.1/10
Correctif: 2.2.5

11 nov. 2015

Lire

1033 – 1044 sur 1070 articles