Alertes, guideset veille WordPress.

Filtre par plugin

ar for wordpress

Effacer

ÉlevéeCVSS 8.3

CVE-2024-37234

Redirection ouverte dans Academy LMS – WordPress LMS Plugin for Complete eLearning Solution (<= 2.0.10)

Plugin: Academy LMS – WordPress LMS Plugin for Complete eLearning Solution
Versions: <= 2.0.10
CVSS: 8.3/10
Correctif: 2.0.11

21 juin 2024

Lire

MoyenneCVSS 4.3

CVE-2024-37226

Défaut de contrôle d'accès dans Kanban Boards for WordPress (<= 2.5.21)

Plugin: Kanban Boards for WordPress
Versions: <= 2.5.21
CVSS: 4.3/10
Correctif: Aucun

21 juin 2024

Lire

MoyenneCVSS 6.1

CVE-2024-5859

XSS réfléchi dans Online Booking & Scheduling Calendar for WordPress by vcita (<= 4.4.2)

Plugin: Online Booking & Scheduling Calendar for WordPress by vcita
Versions: <= 4.4.2
CVSS: 6.1/10
Correctif: 4.4.3

20 juin 2024

Lire

CritiqueCVSS 9.8

CVE-2024-5756

Injection SQL, non authentifié, dans Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress (<= 5.7.23)

Plugin: Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
Versions: <= 5.7.23
CVSS: 9.8/10
Correctif: 5.7.24

20 juin 2024

Lire

ÉlevéeCVSS 8.8

CVE-2024-4845

Injection SQL, authentifié (Abonné+), dans Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress (<= 5.7.22)

Plugin: Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
Versions: <= 5.7.22
CVSS: 8.8/10
Correctif: 5.7.23

11 juin 2024

Lire

Analytify – Google Analytics Dashboard For WordPress (GA4 analytics tracking)

MoyenneCVSS 4.3

CVE-2024-35689

CSRF (Cross-Site Request Forgery) dans Analytify – Google Analytics Dashboard For WordPress (GA4 analytics tracking) (<= 5.2.3)

Plugin: Analytify – Google Analytics Dashboard For WordPress (GA4 analytics tracking)
Versions: <= 5.2.3
CVSS: 4.3/10
Correctif: 5.2.4

6 juin 2024

Lire

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

MoyenneCVSS 5.3

CVE-2024-5483

Divulgation d'informations dans LearnPress – WordPress LMS Plugin for Create and Sell Online Courses (<= 4.2.6.8)

Plugin: LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
Versions: <= 4.2.6.8
CVSS: 5.3/10
Correctif: 4.2.6.8.1

4 juin 2024

Lire

CritiqueCVSS 9.8

CVE-2024-4295

Injection SQL, non authentifié, dans Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress (<= 5.7.20)

Plugin: Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
Versions: <= 5.7.20
CVSS: 9.8/10
Correctif: 5.7.21

4 juin 2024

Lire

MoyenneCVSS 6.4

CVE-2024-4045

XSS stocké, authentifié (Contributeur+), dans Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation (<= 2.16.1)

Plugin: Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation
Versions: <= 2.16.1
CVSS: 6.4/10
Correctif: 2.16.2

24 mai 2024

Lire

MoyenneCVSS 4.3

CVE-2024-3626

Défaut de contrôle d'accès dans Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress (<= 5.7.17)

Plugin: Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
Versions: <= 5.7.17
CVSS: 4.3/10
Correctif: 5.7.18

22 mai 2024

Lire

MoyenneCVSS 6.4

CVE-2024-3611

XSS stocké, authentifié (Contributeur+), dans Toolbar Extras for Elementor & More – WordPress Admin Bar Enhanced (<= 1.4.9)

Plugin: Toolbar Extras for Elementor & More – WordPress Admin Bar Enhanced
Versions: <= 1.4.9
CVSS: 6.4/10
Correctif: Aucun

21 mai 2024

Lire

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

MoyenneCVSS 6.4

CVE-2024-4971

XSS stocké, authentifié (Contributeur+), dans LearnPress – WordPress LMS Plugin for Create and Sell Online Courses (<= 4.2.6.6)

Plugin: LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
Versions: <= 4.2.6.6
CVSS: 6.4/10
Correctif: 4.2.6.7