Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32150

Vulnérabilités (CVE)

Guides publiés

Publiés ce mois-ci

Filtre par plugin

ct commerce

Effacer

Payment Gateway Per Product for WooCommerce

MoyenneCVSS 6.1

CVE-2023-44144

XSS réfléchi dans Payment Gateway Per Product for WooCommerce (<= 3.2.8)

Plugin: Payment Gateway Per Product for WooCommerce
Versions: <= 3.2.8
CVSS: 6.1/10
Correctif: 3.2.8

Élévation de privilèges dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.13.2)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.13.2
CVSS: 7.3/10
Correctif: 4.13.2

CSRF (Cross-Site Request Forgery) dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.13.2)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.13.2
CVSS: 4.3/10
Correctif: 4.13.2

Défaut de contrôle d'accès dans TelSender – Сontact form 7, Events, Wpforms, ninja forms and woocommerce to telegram bot (<= 1.14.11)

Plugin: TelSender – Сontact form 7, Events, Wpforms, ninja forms and woocommerce to telegram bot
Versions: <= 1.14.11
CVSS: 5.3/10
Correctif: 1.14.12

XSS stocké, authentifié (Administrateur+), dans SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments (<= 2.5.0)

Plugin: SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments
Versions: <= 2.5.0
CVSS: 4.4/10
Correctif: 2.5.1

Défaut de contrôle d'accès dans Product Category Slider & Grid for WooCommerce – WooCategory (<= 1.4.15)

Plugin: Product Category Slider & Grid for WooCommerce – WooCategory
Versions: <= 1.4.15
CVSS: 4.3/10
Correctif: 1.4.16

XSS stocké, authentifié (Administrateur+), dans CT Commerce (<= 2.0.1)

Plugin: CT Commerce
Versions: <= 2.0.1
CVSS: 4.4/10
Correctif: Aucun

CSRF (Cross-Site Request Forgery) dans Product Attachment for WooCommerce (<= 2.1.8)

Plugin: Product Attachment for WooCommerce
Versions: <= 2.1.8
CVSS: 4.3/10
Correctif: 2.2.0

Défaut de contrôle d'accès dans WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce (<= 4.4.1)

Plugin: WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce
Versions: <= 4.4.1
CVSS: 5.3/10
Correctif: 4.4.2

XSS réfléchi dans ShopConstruct – Product Catalog, Shopping Cart and eCommerce solution for Store (<= 1.1.2)

Plugin: ShopConstruct – Product Catalog, Shopping Cart and eCommerce solution for Store
Versions: <= 1.1.2
CVSS: 6.1/10
Correctif: Aucun

CSRF (Cross-Site Request Forgery) dans GSheetConnector for WooCommerce – Send your Orders and Products to Google Sheet in Real-Time (<= 1.3.5)

Plugin: GSheetConnector for WooCommerce – Send your Orders and Products to Google Sheet in Real-Time
Versions: <= 1.3.5
CVSS: 4.3/10
Correctif: 1.3.6

XSS réfléchi dans WooCommerce Product Categories Selection Widget (<= 2.0)

Plugin: WooCommerce Product Categories Selection Widget
Versions: <= 2.0
CVSS: 6.1/10
Correctif: Aucun

25 mai 2023

Lire

457 – 468 sur 573 articles