Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32281

Vulnérabilités (CVE)

Guides publiés

183

Publiés ce mois-ci

Filtre par plugin

Effacer

MoyenneCVSS 6.1

CVE-2024-9614

XSS réfléchi dans Constant Contact Forms by MailMunch (<= 2.1.2)

Plugin: Constant Contact Forms by MailMunch
Versions: <= 2.1.2
CVSS: 6.1/10
Correctif: 2.1.3

XSS réfléchi dans Automatic Multilingual Translation by Autoglot (<= 2.4.7)

Plugin: Automatic Multilingual Translation by Autoglot
Versions: <= 2.4.7
CVSS: 6.1/10
Correctif: 2.4.8

Téléversement de fichier arbitraire, non authentifié, dans Datasets Manager by Arttia Creative (<= 1.5)

Plugin: Datasets Manager by Arttia Creative
Versions: <= 1.5
CVSS: 9.8/10
Correctif: Aucun

XSS réfléchi dans Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (<= 1.15.30)

Plugin: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Versions: <= 1.15.30
CVSS: 6.1/10
Correctif: 1.15.31

CSRF (Cross-Site Request Forgery) dans Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode (<= 6.18.9)

Plugin: Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode
Versions: <= 6.18.9
CVSS: 4.3/10
Correctif: 6.18.10

CSRF (Cross-Site Request Forgery) dans Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider (<= 3.92.0)

Plugin: Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider
Versions: <= 3.92.0
CVSS: 4.3/10
Correctif: 3.92.1

Injection SQL, authentifié (Administrateur+), dans Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls (<= 5.4.6)

Plugin: Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls
Versions: <= 5.4.6
CVSS: 4.9/10
Correctif: 5.4.7

XSS stocké, authentifié (Contributeur+), dans Simpul Events by Esotech (<= 1.8.5)

Plugin: Simpul Events by Esotech
Versions: <= 1.8.5
CVSS: 6.4/10
Correctif: Aucun

XSS stocké, authentifié (Contributeur+), dans Featured product by category name (<= 1.1)

Plugin: Featured product by category name
Versions: <= 1.1
CVSS: 6.4/10
Correctif: Aucun

XSS stocké, authentifié, dans adBuddy+ (AdBlocker Detection) by NetfunkDesign (<= 1.1.3)

Plugin: adBuddy+ (AdBlocker Detection) by NetfunkDesign
Versions: <= 1.1.3
CVSS: 4.4/10
Correctif: Aucun

XSS stocké, authentifié (Administrateur+), dans Photo Gallery by 10Web – Mobile-Friendly Image Gallery (<= 1.8.30)

Plugin: Photo Gallery by 10Web – Mobile-Friendly Image Gallery
Versions: <= 1.8.30
CVSS: 4.4/10
Correctif: 1.8.31

XSS réfléchi dans Search order by product SKU for WooCommerce (<= 0.2)

Plugin: Search order by product SKU for WooCommerce
Versions: <= 0.2
CVSS: 6.1/10
Correctif: Aucun

4 nov. 2024

Lire

493 – 504 sur 1146 articles