Se connecter Démarrer

Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31815

Vulnérabilités (CVE)

1

Guides publiés

110

Publiés ce mois-ci

Filtre par plugin

a forms

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 6.5

CVE-2023-36505

Suppression de fichier arbitraire, authentifié, dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.6.24)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.6.24
CVSS: 6.5/10
Correctif: 3.6.25

MoyenneCVSS 6.1

CVE-2023-2701

XSS réfléchi dans Gravity Forms (<= 2.7.4)

Plugin: Gravity Forms
Versions: <= 2.7.4
CVSS: 6.1/10
Correctif: 2.7.5

OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA)

MoyenneCVSS 5.4

CVE-2023-35913

CSRF (Cross-Site Request Forgery) dans OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) (<= 1.1.45)

Plugin: OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA)
Versions: <= 1.1.45
CVSS: 5.4/10
Correctif: 1.1.45

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

MoyenneCVSS 6.1

CVE-2023-30500

XSS réfléchi dans WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More (<= 1.8.1.2)

Plugin: WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More
Versions: <= 1.8.1.2
CVSS: 6.1/10
Correctif: 1.8.1.3

MoyenneCVSS 6.5

CVE-2023-23795

CSRF (Cross-Site Request Forgery) dans Form Builder | Create Responsive Contact Forms (<= 1.9.9.0)

Plugin: Form Builder | Create Responsive Contact Forms
Versions: <= 1.9.9.0
CVSS: 6.5/10
Correctif: Aucun

MoyenneCVSS 4.4

CVE-2023-35095

XSS stocké, authentifié (Administrateur+), dans Flo Forms – Easy Drag & Drop Form Builder (<= 1.0.40)

Plugin: Flo Forms – Easy Drag & Drop Form Builder
Versions: <= 1.0.40
CVSS: 4.4/10
Correctif: 1.0.41

Contact Forms by Cimatti

MoyenneCVSS 4.3

CVE-2023-35051

Défaut de contrôle d'accès dans Contact Forms by Cimatti (<= 1.5.7)

Plugin: Contact Forms by Cimatti
Versions: <= 1.5.7
CVSS: 4.3/10
Correctif: 1.5.8

Contact Forms by Cimatti

MoyenneCVSS 4.3

CVE-2023-2563

CSRF (Cross-Site Request Forgery) dans Contact Forms by Cimatti (<= 1.5.7)

Plugin: Contact Forms by Cimatti
Versions: <= 1.5.7
CVSS: 4.3/10
Correctif: 1.5.8

MoyenneCVSS 6.1

CVE-2023-2324

XSS réfléchi dans Elementor Forms Google Sheet Connector Pro (<= 1.0.6)

Plugin: Elementor Forms Google Sheet Connector Pro
Versions: <= 1.0.6
CVSS: 6.1/10
Correctif: Aucun

GSheetConnector For Ninja Forms

ÉlevéeCVSS 7.2

CVE-2023-2333

XSS réfléchi dans GSheetConnector For Ninja Forms (<= 1.2.6)

Plugin: GSheetConnector For Ninja Forms
Versions: <= 1.2.6
CVSS: 7.2/10
Correctif: 1.2.7

MoyenneCVSS 6.1

CVE-2023-2321

XSS réfléchi dans WPForms Google Sheet Connector Pro (<= 2.5.7)

Plugin: WPForms Google Sheet Connector Pro
Versions: <= 2.5.7
CVSS: 6.1/10
Correctif: 2.5.7

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

MoyenneCVSS 5.3

CVE-2023-2010

Faille de sécurité dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.23.3)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.23.3
CVSS: 5.3/10
Correctif: 1.24.1

769 – 780 sur 1025 articles