Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32253

Vulnérabilités (CVE)

Guides publiés

155

Publiés ce mois-ci

Filtre par plugin

Effacer

Photo Gallery by Ays – Responsive Image Gallery

CritiqueCVSS 9.8

CVE-2016-10921

Injection SQL dans Photo Gallery by Ays – Responsive Image Gallery (<= 1.0.1)

Plugin: Photo Gallery by Ays – Responsive Image Gallery
Versions: <= 1.0.1
CVSS: 9.8/10
Correctif: 1.0.1

Élévation de privilèges dans Community by PeepSo – Download from PeepSo.com (<= 1.6.0)

Plugin: Community by PeepSo – Download from PeepSo.com
Versions: <= 1.6.0
CVSS: 8.8/10
Correctif: 1.6.1

CSRF (Cross-Site Request Forgery) dans WP Database Backup – Unlimited Database & Files Backup by Backup for WP (<= 4.3)

Plugin: WP Database Backup – Unlimited Database & Files Backup by Backup for WP
Versions: <= 4.3
CVSS: 8.8/10
Correctif: 4.3.1

Injection SQL dans Visitors Online by BestWebSoft (<= 0.3)

Plugin: Visitors Online by BestWebSoft
Versions: <= 0.3
CVSS: 9.8/10
Correctif: 0.4

Injection SQL dans Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms (<= 1.1.1)

Plugin: Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms
Versions: <= 1.1.1
CVSS: 9.8/10
Correctif: 1.1.1

XSS stocké, authentifié, dans Relevant – Related, Featured, Latest, and Popular Posts by BestWebSoft (<= 1.0.8)

Plugin: Relevant – Related, Featured, Latest, and Popular Posts by BestWebSoft
Versions: <= 1.0.8
CVSS: 5.5/10
Correctif: 1.0.8

XSS (Cross-Site Scripting) dans Quotes and Tips by BestWebSoft (<= 1.20)

Plugin: Quotes and Tips by BestWebSoft
Versions: <= 1.20
CVSS: 6.1/10
Correctif: 1.20

XSS réfléchi dans PowerPress Podcasting plugin by Blubrry (<= 6.0.4)

Plugin: PowerPress Podcasting plugin by Blubrry
Versions: <= 6.0.4
CVSS: 6.1/10
Correctif: 6.0.5

XSS (Cross-Site Scripting) dans Replyable – Subscribe to Comments and Reply by Email (<= 1.4.6)

Plugin: Replyable – Subscribe to Comments and Reply by Email
Versions: <= 1.4.6
CVSS: 6.1/10
Correctif: 1.4.6

Faille de sécurité dans Child Theme Creator by Orbisius (<= 1.2.8)

Plugin: Child Theme Creator by Orbisius
Versions: <= 1.2.8
CVSS: 6.5/10
Correctif: 1.2.8

Traversée de répertoire dans WordPress Renaming Tool by Vlajo (<= 1.0)

Plugin: WordPress Renaming Tool by Vlajo
Versions: <= 1.0
CVSS: 7.5/10
Correctif: Aucun

XSS (Cross-Site Scripting) dans Contact Form by ContactMe.com (<= 2.3)

Plugin: Contact Form by ContactMe.com
Versions: <= 2.3
CVSS: 5.3/10
Correctif: Aucun

15 avr. 2015

Lire

1117 – 1128 sur 1145 articles