Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32416

Vulnérabilités (CVE)

1

Guides publiés

39

Publiés ce mois-ci

Filtre par plugin

GiveWP – Donation Plugin and Fundraising Platform

MoyenneCVSS 5.3

CVE-2024-6551

Faille de sécurité, non authentifié, dans GiveWP – Donation Plugin and Fundraising Platform (<= 3.15.1)

Plugin: GiveWP – Donation Plugin and Fundraising Platform
Versions: <= 3.15.1
CVSS: 5.3/10
Correctif: 3.16.0

MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar

ÉlevéeCVSS 8.1

CVE-2024-7856

Suppression de fichier arbitraire, authentifié (Auteur+), dans MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar (<= 5.7.0.1)

Plugin: MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar
Versions: <= 5.7.0.1
CVSS: 8.1/10
Correctif: 5.7.1

SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments

MoyenneCVSS 6.1

CVE-2024-43970

XSS réfléchi dans SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments (<= 2.29.3)

Plugin: SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments
Versions: <= 2.29.3
CVSS: 6.1/10
Correctif: 2.29.4

ÉlevéeCVSS 7.2

CVE-2024-43975

XSS stocké, non authentifié, dans Super Store Finder (<= 6.9.7)

Plugin: Super Store Finder
Versions: <= 6.9.7
CVSS: 7.2/10
Correctif: 6.9.8

MoyenneCVSS 5.3

CVE-2024-5857

Défaut de contrôle d'accès, non authentifié, dans Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free (<= 3.7.3.2)

Plugin: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Versions: <= 3.7.3.2
CVSS: 5.3/10
Correctif: 3.7.4.1

Payment forms, Buy now buttons, and Invoicing System | GetPaid

MoyenneCVSS 4.3

CVE-2024-43973

Défaut de contrôle d'accès dans Payment forms, Buy now buttons, and Invoicing System | GetPaid (<= 2.8.11)

Plugin: Payment forms, Buy now buttons, and Invoicing System | GetPaid
Versions: <= 2.8.11
CVSS: 4.3/10
Correctif: 2.8.12

Podlove Podcast Publisher

MoyenneCVSS 6.4

CVE-2024-43983

XSS stocké, authentifié (Contributeur+), dans Podlove Podcast Publisher (<= 4.1.13)

Plugin: Podlove Podcast Publisher
Versions: <= 4.1.13
CVSS: 6.4/10
Correctif: 4.1.14

Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers

MoyenneCVSS 6.1

CVE-2024-43971

XSS réfléchi dans Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers (<= 3.2.5)

Plugin: Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers
Versions: <= 3.2.5
CVSS: 6.1/10
Correctif: 3.2.6

Theme Editor

ÉlevéeCVSS 7.2

CVE-2022-2440

Injection d'objet PHP, authentifié (Éditeur+), dans Theme Editor (<= 2.8)

Plugin: Theme Editor
Versions: <= 2.8
CVSS: 7.2/10
Correctif: 2.9

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 4.4

CVE-2024-43999

XSS stocké, authentifié (Administrateur+), dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.8.11)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.8.11
CVSS: 4.4/10
Correctif: 3.8.12

CritiqueCVSS 10.0

CVE-2024-43978

Injection SQL, non authentifié, dans Super Store Finder (<= 6.9.7)

Plugin: Super Store Finder
Versions: <= 6.9.7
CVSS: 10.0/10
Correctif: 6.9.8

GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

MoyenneCVSS 4.3

CVE-2024-43981

Défaut de contrôle d'accès dans GeoDirectory – WP Business Directory Plugin and Classified Listings Directory (<= 2.3.70)

Plugin: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
Versions: <= 2.3.70
CVSS: 4.3/10
Correctif: 2.3.71

17521 – 17532 sur 32417 articles