Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32150

Vulnérabilités (CVE)

1

Guides publiés

52

Publiés ce mois-ci

Filtre par plugin

ct commerce

ÉlevéeCVSS 7.2

CVE-2021-24522

XSS (Cross-Site Scripting), non authentifié, dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 3.1.10)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 3.1.10
CVSS: 7.2/10
Correctif: 3.1.11

CritiqueCVSS 9.8

CVE-2021-34622

Élévation de privilèges, non authentifié, dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (3.0.0 - 3.1.3)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: 3.0.0 - 3.1.3
CVSS: 9.8/10
Correctif: 3.1.4

CritiqueCVSS 9.8

CVE-2021-34624

Téléversement de fichier arbitraire dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (3.0.0 - 3.1.3)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: 3.0.0 - 3.1.3
CVSS: 9.8/10
Correctif: 3.1.4

CritiqueCVSS 9.8

CVE-2021-34623

Élévation de privilèges, non authentifié, dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (3.0.0 - 3.1.3)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: 3.0.0 - 3.1.3
CVSS: 9.8/10
Correctif: 3.1.4

MoyenneCVSS 5.5

CVE-2021-24450

XSS stocké, authentifié, dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 3.1.8)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 3.1.8
CVSS: 5.5/10
Correctif: 3.1.8

CritiqueCVSS 9.8

CVE-2021-34621

Élévation de privilèges, non authentifié, dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (3.0.0 - 3.1.3)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: 3.0.0 - 3.1.3
CVSS: 9.8/10
Correctif: 3.1.4

ÉlevéeCVSS 7.3

CVE-2021-4444

Défaut de contrôle d'accès dans Product Filter for WooCommerce by WBW (<= 1.4.9)

Plugin: Product Filter for WooCommerce by WBW
Versions: <= 1.4.9
CVSS: 7.3/10
Correctif: 1.5.0

eCommerce Product Catalog Plugin for WordPress

MoyenneCVSS 4.3

CVE-2021-4392

CSRF (Cross-Site Request Forgery) dans eCommerce Product Catalog Plugin for WordPress (<= 2.9.44)

Plugin: eCommerce Product Catalog Plugin for WordPress
Versions: <= 2.9.44
CVSS: 4.3/10
Correctif: 2.9.44

eCommerce Product Catalog Plugin for WordPress

MoyenneCVSS 4.3

CVE-2021-4393

CSRF (Cross-Site Request Forgery) dans eCommerce Product Catalog Plugin for WordPress (<= 3.0.18)

Plugin: eCommerce Product Catalog Plugin for WordPress
Versions: <= 3.0.18
CVSS: 4.3/10
Correctif: 3.0.18

Product Input Fields for WooCommerce

ÉlevéeCVSS 7.5

CVE-2020-36696

Défaut de contrôle d'accès dans Product Input Fields for WooCommerce (<= 1.2.6)

Plugin: Product Input Fields for WooCommerce
Versions: <= 1.2.6
CVSS: 7.5/10
Correctif: 1.2.7

Advanced Woo Search – Product Search for WooCommerce

MoyenneCVSS 5.3

CVE-2020-12070

Divulgation d'informations dans Advanced Woo Search – Product Search for WooCommerce (<= 1.99)

Plugin: Advanced Woo Search – Product Search for WooCommerce
Versions: <= 1.99
CVSS: 5.3/10
Correctif: 2.00

ÉlevéeCVSS 8.8

CVE-2020-12074

Faille de sécurité dans Product Reviews Import Export for WooCommerce (<= 1.3.3)

Plugin: Product Reviews Import Export for WooCommerce
Versions: <= 1.3.3
CVSS: 8.8/10
Correctif: 1.3.3

553 – 564 sur 573 articles