Plugin: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
Versions: <= 3.1.43
CVSS: 6.4/10
Correctif: 3.1.44

15 juil. 2024

Lire

WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar

MoyenneCVSS 6.4

CVE-2024-38703

XSS stocké, authentifié (Contributeur+), dans WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar (<= 1.7.9)

Plugin: WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar
Versions: <= 1.7.9
CVSS: 6.4/10
Correctif: 1.8.0

Faille de sécurité, non authentifié, dans WP-Recall – Registration, Profile, Commerce & More (<= 16.26.6)

Plugin: WP-Recall – Registration, Profile, Commerce & More
Versions: <= 16.26.6
CVSS: 5.3/10
Correctif: 16.26.7

CSRF (Cross-Site Request Forgery) dans WP-Recall – Registration, Profile, Commerce & More (<= 16.26.6)

Plugin: WP-Recall – Registration, Profile, Commerce & More
Versions: <= 16.26.6
CVSS: 4.3/10
Correctif: 16.26.7

Injection SQL, authentifié (Contributeur+), dans WP-Recall – Registration, Profile, Commerce & More (<= 16.26.5)

Plugin: WP-Recall – Registration, Profile, Commerce & More
Versions: <= 16.26.5
CVSS: 9.9/10
Correctif: 16.26.6

CSRF (Cross-Site Request Forgery) dans WPCal.io – Easy Meeting Scheduler (<= 0.9.5.8)

Plugin: WPCal.io – Easy Meeting Scheduler
Versions: <= 0.9.5.8
CVSS: 4.3/10
Correctif: 0.9.5.9

Injection SQL, non authentifié, dans WP-Recall – Registration, Profile, Commerce & More (<= 16.26.5)

Plugin: WP-Recall – Registration, Profile, Commerce & More
Versions: <= 16.26.5
CVSS: 10.0/10
Correctif: 16.26.6

XSS stocké, authentifié (Contributeur+), dans Mortgage Calculators WP (<= 1.56)

Plugin: Mortgage Calculators WP
Versions: <= 1.56
CVSS: 6.4/10
Correctif: 1.60

Défaut de contrôle d'accès dans WP-Recall – Registration, Profile, Commerce & More (<= 16.26.5)

Plugin: WP-Recall – Registration, Profile, Commerce & More
Versions: <= 16.26.5
CVSS: 4.3/10
Correctif: 16.26.6

CSRF (Cross-Site Request Forgery) dans WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar (<= 1.7.6)

Plugin: WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar
Versions: <= 1.7.6
CVSS: 4.3/10
Correctif: 1.7.7

Injection SQL, authentifié (Contributeur+), dans WP Responsive Tabs horizontal vertical and accordion Tabs (<= 1.1.17)

Plugin: WP Responsive Tabs horizontal vertical and accordion Tabs
Versions: <= 1.1.17
CVSS: 9.9/10
Correctif: 1.1.18

28 mars 2024

Lire

49 – 60 sur 90 articles