Alertes, guideset veille WordPress.

Pourquoi nous avons lancé un observatoire de la sécurité WordPress en France

Nous lançons un suivi régulier et national de l'état de sécurité réel des sites WordPress français. Pourquoi, comment, et ce que nous publierons.

XSS stocké, non authentifié, dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.57.2)

Plugin

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

Versions

<= 1.57.2

CVSS

7.2/10

Correctif

1.57.2.1

XSS stocké, authentifié (Contributeur+), dans Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns (<= 6.4.5)

Plugin

Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns

Versions

<= 6.4.5

CVSS

6.4/10

Correctif

6.4.6

XSS réfléchi dans Ad Inserter – Ad Manager & AdSense Ads (<= 2.8.18)

Plugin

Ad Inserter – Ad Manager & AdSense Ads

Versions

<= 2.8.18

CVSS

6.1/10

Correctif

2.8.19

XSS stocké, non authentifié, dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.57.2)

Plugin

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

Versions

<= 1.57.2

CVSS

7.2/10

Correctif

1.57.2.1

XSS stocké, non authentifié, dans PDF Invoices & Packing Slips for WooCommerce (<= 5.16.1)

Plugin

PDF Invoices & Packing Slips for WooCommerce

Versions

<= 5.16.1

CVSS

7.2/10

Correctif

5.16.2

XSS stocké, non authentifié, dans Business Essentials for Contact Form 7 (<= 1.2.1)

Plugin

Business Essentials for Contact Form 7

Versions

<= 1.2.1

CVSS

7.2/10

Correctif

1.2.2

Faille de sécurité, authentifié (Abonné+), dans Super Forms – Drag & Drop Form Builder (<= 6.3.316)

Plugin

Super Forms – Drag & Drop Form Builder

Versions

<= 6.3.316

CVSS

8.1/10

Correctif

6.3.317

XSS DOM dans Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More (<= 5.5.1.3)

Plugin

Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More

Versions

<= 5.5.1.3

CVSS

4.7/10

Correctif

5.5.1.4

XSS DOM dans Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More (<= 5.5.1.3)

Plugin

Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More

Versions

<= 5.5.1.3

CVSS

6.1/10

Correctif

5.5.1.4

XSS stocké, authentifié (Abonné+), dans bbp style pack (<= 6.4.8)

Plugin

bbp style pack

Versions

<= 6.4.8

CVSS

6.4/10

Correctif

6.4.9

XSS stocké, authentifié (Abonné+), dans Awesome Support – WordPress HelpDesk & Support Plugin (<= 6.4.0)

Plugin

Awesome Support – WordPress HelpDesk & Support Plugin

Versions

<= 6.4.0

CVSS

6.4/10

Correctif

6.4.1