Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31786

Vulnérabilités (CVE)

Guides publiés

Publiés ce mois-ci

Filtre par plugin

wp contact

Effacer

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

ÉlevéeCVSS 8.5

CVE-2024-11205

Défaut de contrôle d'accès, authentifié (Auteur+), dans WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More (1.8.4 - 1.9.2.1)

Plugin: WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More
Versions: 1.8.4 - 1.9.2.1
CVSS: 8.5/10
Correctif: 1.9.2.2

XSS stocké, authentifié, dans WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More (<= 1.9.2.2)

Plugin: WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More
Versions: <= 1.9.2.2
CVSS: 4.4/10
Correctif: 1.9.2.3

Faille de sécurité, non authentifié, dans WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click (<= 1.7.5)

Plugin: WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click
Versions: <= 1.7.5
CVSS: 7.3/10
Correctif: 1.7.6

CSRF (Cross-Site Request Forgery) dans WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More (<= 1.9.1.6)

Plugin: WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More
Versions: <= 1.9.1.6
CVSS: 4.3/10
Correctif: 1.9.2.1

XSS stocké, authentifié (Administrateur+), dans WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More (<= 1.9.1.5)

Plugin: WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More
Versions: <= 1.9.1.5
CVSS: 4.4/10
Correctif: 1.9.1.6

XSS réfléchi dans WP Ajax Contact Form (<= 2.2.2)

Plugin: WP Ajax Contact Form
Versions: <= 2.2.2
CVSS: 6.1/10
Correctif: Aucun

CSRF (Cross-Site Request Forgery) dans WP Ajax Contact Form (<= 2.2.2)

Plugin: WP Ajax Contact Form
Versions: <= 2.2.2
CVSS: 4.3/10
Correctif: Aucun

Faille de sécurité, non authentifié, dans Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent (<= 1.0.33)

Plugin: Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent
Versions: <= 1.0.33
CVSS: 5.3/10
Correctif: 1.0.34

CSRF (Cross-Site Request Forgery) dans Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms (<= 1.1.5)

Plugin: Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms
Versions: <= 1.1.5
CVSS: 4.3/10
Correctif: 1.1.6

CSRF (Cross-Site Request Forgery) dans Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms (<= 1.3.9)

Plugin: Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms
Versions: <= 1.3.9
CVSS: 4.3/10
Correctif: 1.4.0

CSRF (Cross-Site Request Forgery) dans Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms (<= 1.3.1)

Plugin: Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms
Versions: <= 1.3.1
CVSS: 4.3/10
Correctif: 1.3.2

CSRF (Cross-Site Request Forgery) dans Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms (<= 1.2.0)

Plugin: Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms
Versions: <= 1.2.0
CVSS: 4.3/10
Correctif: 1.2.1

9 mai 2024

Lire

61 – 72 sur 108 articles