Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32281

Vulnérabilités (CVE)

1

Guides publiés

183

Publiés ce mois-ci

Filtre par plugin

MoyenneCVSS 4.3

CVE-2024-1310

Défaut de contrôle d'accès dans WooCommerce (<= 8.6)

Plugin: WooCommerce
Versions: <= 8.6
CVSS: 4.3/10
Correctif: 8.6

Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More

MoyenneCVSS 6.1

CVE-2024-29759

XSS réfléchi dans Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More (<= 1.2.54)

Plugin: Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
Versions: <= 1.2.54
CVSS: 6.1/10
Correctif: 1.2.55

Unlimited Elements For Elementor

MoyenneCVSS 6.1

CVE-2024-29792

XSS réfléchi dans Unlimited Elements For Elementor (<= 1.5.93)

Plugin: Unlimited Elements For Elementor
Versions: <= 1.5.93
CVSS: 6.1/10
Correctif: 1.5.94

Easy Social Feed – Social Photos Gallery and Post Feed for WordPress

MoyenneCVSS 6.4

CVE-2024-30180

XSS stocké, authentifié (Contributeur+), dans Easy Social Feed – Social Photos Gallery and Post Feed for WordPress (<= 6.5.3)

Plugin: Easy Social Feed – Social Photos Gallery and Post Feed for WordPress
Versions: <= 6.5.3
CVSS: 6.4/10
Correctif: 6.5.4

WC Builder – WooCommerce Page Builder for WPBakery

MoyenneCVSS 6.4

CVE-2024-29926

XSS stocké, authentifié (Contributeur+), dans WC Builder – WooCommerce Page Builder for WPBakery (<= 1.0.18)

Plugin: WC Builder – WooCommerce Page Builder for WPBakery
Versions: <= 1.0.18
CVSS: 6.4/10
Correctif: 1.0.19

MoyenneCVSS 4.3

CVE-2024-0588

CSRF (Cross-Site Request Forgery) dans Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions (<= 2.12.10)

Plugin: Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
Versions: <= 2.12.10
CVSS: 4.3/10
Correctif: 3.0

MoyenneCVSS 6.1

CVE-2024-30198

XSS réfléchi dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.5)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.5
CVSS: 6.1/10
Correctif: 2.8.6

Grid Shortcodes

MoyenneCVSS 6.4

CVE-2024-29797

XSS stocké, authentifié (Contributeur+), dans Grid Shortcodes (<= 1.1)

Plugin: Grid Shortcodes
Versions: <= 1.1
CVSS: 6.4/10
Correctif: 1.1.1

Essential Addons for Elementor – Popular Elementor Templates & Widgets

MoyenneCVSS 6.4

CVE-2024-2650

XSS stocké, authentifié (Contributeur+), dans Essential Addons for Elementor – Popular Elementor Templates & Widgets (<= 5.9.11)

Plugin: Essential Addons for Elementor – Popular Elementor Templates & Widgets
Versions: <= 5.9.11
CVSS: 6.4/10
Correctif: 5.9.12

Survey Maker by AYS

MoyenneCVSS 6.1

CVE-2024-29918

XSS réfléchi dans Survey Maker by AYS (<= 4.0.6)

Plugin: Survey Maker by AYS
Versions: <= 4.0.6
CVSS: 6.1/10
Correctif: 4.0.7

Exclusive Addons for Elementor

MoyenneCVSS 6.4

CVE-2024-30177

XSS stocké, authentifié (Contributeur+), dans Exclusive Addons for Elementor (<= 2.6.8)

Plugin: Exclusive Addons for Elementor
Versions: <= 2.6.8
CVSS: 6.4/10
Correctif: 2.6.9

Prime Slider Addons for Elementor

MoyenneCVSS 6.4

CVE-2024-30186

XSS stocké, authentifié (Contributeur+), dans Prime Slider Addons for Elementor (<= 3.13.1)

Plugin: Prime Slider Addons for Elementor
Versions: <= 3.13.1
CVSS: 6.4/10
Correctif: 3.13.2

21061 – 21072 sur 32282 articles