Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31933

Vulnérabilités (CVE)

Guides publiés

228

Publiés ce mois-ci

Filtre par plugin

Effacer

SportsPress – Sports Club & League Manager

MoyenneCVSS 5.4

CVE-2020-13892

XSS (Cross-Site Scripting) dans SportsPress – Sports Club & League Manager (<= 2.7.2)

Plugin: SportsPress – Sports Club & League Manager
Versions: <= 2.7.2
CVSS: 5.4/10
Correctif: 2.7.2

Injection SQL dans Events Manager – Calendar, Bookings, Tickets, and more! (<= 5.9.7.3)

Plugin: Events Manager – Calendar, Bookings, Tickets, and more!
Versions: <= 5.9.7.3
CVSS: 7.2/10
Correctif: 5.9.8

XSS (Cross-Site Scripting) dans Events Manager – Calendar, Bookings, Tickets, and more! (<= 5.9.7.3)

Plugin: Events Manager – Calendar, Bookings, Tickets, and more!
Versions: <= 5.9.7.3
CVSS: 6.1/10
Correctif: 5.9.8

XSS stocké dans Elementor Website Builder – more than just a page builder (<= 2.9.8)

Plugin: Elementor Website Builder – more than just a page builder
Versions: <= 2.9.8
CVSS: 5.4/10
Correctif: 2.9.9

XSS stocké dans Elementor Website Builder – more than just a page builder (<= 2.9.8)

Plugin: Elementor Website Builder – more than just a page builder
Versions: <= 2.9.8
CVSS: 5.4/10
Correctif: 2.9.9

Téléversement de fichier arbitraire dans Drag and Drop Multiple File Upload for Contact Form 7 (<= 1.3.3.2)

Plugin: Drag and Drop Multiple File Upload for Contact Form 7
Versions: <= 1.3.3.2
CVSS: 9.8/10
Correctif: 1.3.3.3

Injection SQL, authentifié, dans AdRotate Banner Manager (<= 5.8.4)

Plugin: AdRotate Banner Manager
Versions: <= 5.8.4
CVSS: 7.2/10
Correctif: 5.8.4

XSS réfléchi dans JobSearch WP Job Board (<= 1.5.1)

Plugin: JobSearch WP Job Board
Versions: <= 1.5.1
CVSS: 7.1/10
Correctif: 1.5.1

Contournement d'authentification dans Brizy – Page Builder (<= 1.0.126)

Plugin: Brizy – Page Builder
Versions: <= 1.0.126
CVSS: 7.4/10
Correctif: 1.0.126

XSS (Cross-Site Scripting) dans Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel (<= 1.8.12)

Plugin: Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel
Versions: <= 1.8.12
CVSS: 4.8/10
Correctif: 1.8.18

Téléversement de fichier arbitraire, authentifié, dans Allow svg files (<= 1.1)

Plugin: Allow svg files
Versions: <= 1.1
CVSS: 7.2/10
Correctif: 1.1

Injection SQL, authentifié, dans Blog2Social: Social Media Auto Post & Scheduler (<= 6.3.0)

Plugin: Blog2Social: Social Media Auto Post & Scheduler
Versions: <= 6.3.0
CVSS: 8.8/10
Correctif: 6.3.1

29 mai 2020

Lire

29509 – 29520 sur 31934 articles