Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31845

Vulnérabilités (CVE)

Guides publiés

140

Publiés ce mois-ci

Filtre par plugin

woo popup

Effacer

MoyenneCVSS 6.4

CVE-2025-7960

XSS stocké, authentifié (Contributeur+), dans King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder (<= 51.1.39)

Plugin: King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder
Versions: <= 51.1.39
CVSS: 6.4/10
Correctif: Aucun

Injection SQL, authentifié (Abonné+), dans Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers (<= 2.1.5)

Plugin: Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
Versions: <= 2.1.5
CVSS: 6.5/10
Correctif: 2.2.0

Élévation de privilèges, non authentifié, dans King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder (24.12.92 - 51.1.14)

Plugin: King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder
Versions: 24.12.92 - 51.1.14
CVSS: 9.8/10
Correctif: 51.1.35

SSRF (Server-Side Request Forgery), non authentifié, dans Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers (<= 2.1.4)

Plugin: Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
Versions: <= 2.1.4
CVSS: 7.5/10
Correctif: 2.1.5

Téléversement de fichier arbitraire, non authentifié, dans King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder (<= 51.1.36)

Plugin: King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder
Versions: <= 51.1.36
CVSS: 9.8/10
Correctif: 51.1.37

Élévation de privilèges, non authentifié, dans King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder (<= 51.1.36)

Plugin: King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder
Versions: <= 51.1.36
CVSS: 9.8/10
Correctif: 51.1.37

Injection SQL, non authentifié, dans Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers (<= 2.1.3)

Plugin: Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
Versions: <= 2.1.3
CVSS: 7.5/10
Correctif: 2.1.4

XSS stocké, authentifié (Contributeur+), dans Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. (<= 3.0.7)

Plugin: Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups.
Versions: <= 3.0.7
CVSS: 6.4/10
Correctif: 3.0.8

XSS stocké, authentifié (Contributeur+), dans WPB Quick View Popup for WooCommerce – Fast Product Preview Modal & AJAX Quick View (<= 2.1.8)

Plugin: WPB Quick View Popup for WooCommerce – Fast Product Preview Modal & AJAX Quick View
Versions: <= 2.1.8
CVSS: 6.4/10
Correctif: 2.2

XSS stocké, authentifié (Contributeur+), dans King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder (<= 51.1.62)

Plugin: King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder
Versions: <= 51.1.62
CVSS: 6.4/10
Correctif: 51.1.63

Défaut de contrôle d'accès dans King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder (<= 51.1.62)

Plugin: King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder
Versions: <= 51.1.62
CVSS: 4.3/10
Correctif: 51.1.63

CSRF (Cross-Site Request Forgery) dans YITH WooCommerce Popup (<= 1.48.0)

Plugin: YITH WooCommerce Popup
Versions: <= 1.48.0
CVSS: 4.3/10
Correctif: 1.48.1

30 juil. 2025

Lire

13 – 24 sur 44 articles