Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32284

Vulnérabilités (CVE)

Guides publiés

186

Publiés ce mois-ci

Filtre par plugin

contact form 7

Effacer

HT Contact Form – Drag & Drop Form Builder for WordPress

MoyenneCVSS 4.3

CVE-2023-0484

CSRF (Cross-Site Request Forgery) dans HT Contact Form – Drag & Drop Form Builder for WordPress (<= 1.1.5)

Plugin: HT Contact Form – Drag & Drop Form Builder for WordPress
Versions: <= 1.1.5
CVSS: 4.3/10
Correctif: 1.1.6

CSRF (Cross-Site Request Forgery) dans Drag and Drop Multiple File Upload for Contact Form 7 (<= 1.3.6.5)

Plugin: Drag and Drop Multiple File Upload for Contact Form 7
Versions: <= 1.3.6.5
CVSS: 8.8/10
Correctif: 1.3.6.6

XSS stocké, authentifié (Administrateur+), dans Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More (<= 1.1.150)

Plugin: Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
Versions: <= 1.1.150
CVSS: 4.4/10
Correctif: 1.1.151

CSRF (Cross-Site Request Forgery) dans WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms – CRM, Bigin (<= 1.2.2)

Plugin: WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms – CRM, Bigin
Versions: <= 1.2.2
CVSS: 4.3/10
Correctif: 1.2.3

Faille de sécurité, authentifié, dans Quick Contact Form (<= 8.0.3.1)

Plugin: Quick Contact Form
Versions: <= 8.0.3.1
CVSS: 4.4/10
Correctif: 8.0.4

CSRF (Cross-Site Request Forgery) dans Void Contact Form 7 Widget For Elementor Page Builder (<= 2.1.1)

Plugin: Void Contact Form 7 Widget For Elementor Page Builder
Versions: <= 2.1.1
CVSS: 4.3/10
Correctif: 2.2

Injection SQL, authentifié, dans All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements (2.0.8 - 2.0.8)

Plugin: All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements
Versions: 2.0.8 - 2.0.8
CVSS: 7.2/10
Correctif: 2.0.9