Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32144

Vulnérabilités (CVE)

Guides publiés

Publiés ce mois-ci

Filtre par plugin

frontend post submission

Effacer

ÉlevéeCVSS 8.8

CVE-2024-8246

Élévation de privilèges, authentifié (Contributeur+), dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.11)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.11
CVSS: 8.8/10
Correctif: 2.8.12

Défaut de contrôle d'accès, authentifié (Auteur+), dans Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin (<= 1.2.2)

Plugin: Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin
Versions: <= 1.2.2
CVSS: 4.3/10
Correctif: 1.2.3

Faille de sécurité dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.9)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.9
CVSS: 6.5/10
Correctif: 2.8.10

SSRF (Server-Side Request Forgery), non authentifié, dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.8)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.8
CVSS: 9.3/10
Correctif: 2.8.9

XSS réfléchi dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.5)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.5
CVSS: 6.1/10
Correctif: 2.8.6

Défaut de contrôle d'accès, non authentifié, dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.7)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.7
CVSS: 8.2/10
Correctif: 2.8.8

Défaut de contrôle d'accès dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.7)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.7
CVSS: 4.3/10
Correctif: 2.8.8

Défaut de contrôle d'accès, non authentifié, dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.7)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.7
CVSS: 7.5/10
Correctif: 2.8.8

XSS stocké, authentifié (Éditeur+), dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.1)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.1
CVSS: 6.4/10
Correctif: 2.8.2

Injection d'objet PHP dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.7.7)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.7.7
CVSS: 8.8/10
Correctif: 2.7.8

XSS stocké, authentifié (Contributeur+), dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.7.2)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.7.2
CVSS: 6.4/10
Correctif: 2.7.3

Injection SQL dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.2.7)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.2.7
CVSS: 9.8/10
Correctif: 2.2.8

9 nov. 2018

Lire

13 – 24 sur 24 articles