Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32 747

Vulnérabilités (CVE)

Guides publiés

Publiés ce mois-ci

Filtre par plugin

member access

Effacer

ÉlevéeCVSS 8.8

CVE-2024-8326

Faille de sécurité, authentifié (Contributeur+), dans s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions (<= 241114)

Plugin: s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
Versions: <= 241114
CVSS: 8.8/10
Correctif: 241216

Faille de sécurité, non authentifié, dans Restrict – membership, site, content and user access restrictions for WordPress (<= 2.2.8)

Plugin: Restrict – membership, site, content and user access restrictions for WordPress
Versions: <= 2.2.8
CVSS: 5.3/10
Correctif: 2.2.9

Exécution de code à distance (RCE), non authentifié, dans s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions (<= 241114)

Plugin: s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
Versions: <= 241114
CVSS: 8.1/10
Correctif: 241216

Inclusion de fichier local (LFI), non authentifié, dans UsersControl – Users Profile, Free or Paid Subscriptions, User Access Restriction & Members Directory (<= 1.0.16)

Plugin: UsersControl – Users Profile, Free or Paid Subscriptions, User Access Restriction & Members Directory
Versions: <= 1.0.16
CVSS: 9.8/10
Correctif: Aucun

Élévation de privilèges dans s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions (<= 240315)

Plugin: s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
Versions: <= 240315
CVSS: 9.1/10
Correctif: 240325

XSS réfléchi dans Restrict User Access – Ultimate Membership & Content Protection (<= 2.5)

Plugin: Restrict User Access – Ultimate Membership & Content Protection
Versions: <= 2.5
CVSS: 6.1/10
Correctif: 2.6

Faille de sécurité dans s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions (<= 230815)

Plugin: s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
Versions: <= 230815
CVSS: 5.3/10
Correctif: 240315

Faille de sécurité dans Restrict User Access – Ultimate Membership & Content Protection (<= 2.5)

Plugin: Restrict User Access – Ultimate Membership & Content Protection
Versions: <= 2.5
CVSS: 5.3/10
Correctif: 2.6

XSS réfléchi dans Restrict – membership, site, content and user access restrictions for WordPress (<= 2.2.4)

Plugin: Restrict – membership, site, content and user access restrictions for WordPress
Versions: <= 2.2.4
CVSS: 6.1/10
Correctif: 2.2.5

XSS (Cross-Site Scripting) dans s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions (<= 111220)

Plugin: s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
Versions: <= 111220
CVSS: 7.2/10
Correctif: 111220

12 févr. 2012

Lire

13 – 22 sur 22 articles

Votre site est-il exposé ?

Analysez-le gratuitement. En-têtes de sécurité, fichiers exposés et version détectable, en quelques secondes.

Analyser mon site gratuitement