Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32327

Vulnérabilités (CVE)

Guides publiés

229

Publiés ce mois-ci

Filtre par plugin

survey

Effacer

MoyenneCVSS 4.3

CVE-2023-51489

CSRF (Cross-Site Request Forgery) dans Crowdsignal Dashboard – Polls, Surveys & more (<= 3.0.11)

Plugin: Crowdsignal Dashboard – Polls, Surveys & more
Versions: <= 3.0.11
CVSS: 4.3/10
Correctif: 3.1.0

Défaut de contrôle d'accès dans MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor (<= 3.4.0)

Plugin: MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
Versions: <= 3.4.0
CVSS: 5.3/10
Correctif: 3.4.1

Faille de sécurité dans Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI (<= 2.0.3)

Plugin: Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
Versions: <= 2.0.3
CVSS: 5.3/10
Correctif: 2.0.3.1

Défaut de contrôle d'accès dans UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds (<= 1.0.10)

Plugin: UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds
Versions: <= 1.0.10
CVSS: 5.3/10
Correctif: 1.0.11

XSS stocké, authentifié (Contributeur+), dans Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls (<= 2.1.0)

Plugin: Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls
Versions: <= 2.1.0
CVSS: 6.4/10
Correctif: 2.2.0

XSS réfléchi dans Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms (<= 1.25.9)

Plugin: Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms
Versions: <= 1.25.9
CVSS: 6.1/10
Correctif: 1.25.10

XSS stocké, authentifié (Contributeur+), dans Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker (<= 8.1.13)

Plugin: Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
Versions: <= 8.1.13
CVSS: 6.4/10
Correctif: 8.1.14

XSS stocké, authentifié (Contributeur+), dans Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls (<= 2.1.0)

Plugin: Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls
Versions: <= 2.1.0
CVSS: 6.4/10
Correctif: 2.2.0

CSRF (Cross-Site Request Forgery) dans Quill Forms | Conversational Multi Step Forms, Surveys & quizzes (<= 3.3.0)

Plugin: Quill Forms | Conversational Multi Step Forms, Surveys & quizzes
Versions: <= 3.3.0
CVSS: 5.4/10
Correctif: 3.4.0

XSS (Cross-Site Scripting), non authentifié, dans UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds (<= 1.0.9)

Plugin: UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds
Versions: <= 1.0.9
CVSS: 7.2/10
Correctif: 1.0.10

Défaut de contrôle d'accès dans Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder (<= 5.0.9)

Plugin: Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
Versions: <= 5.0.9
CVSS: 5.3/10
Correctif: 5.0.9

XSS stocké, non authentifié, dans UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds (<= 1.0.7)

Plugin: UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds
Versions: <= 1.0.7
CVSS: 7.2/10
Correctif: 1.0.8

4 sept. 2023

Lire

217 – 228 sur 310 articles