Se connecter Démarrer

Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31786

Vulnérabilités (CVE)

1

Guides publiés

81

Publiés ce mois-ci

Filtre par plugin

contact form 7

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 6.1

CVE-2017-18574

Faille de sécurité dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.0.31)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.0.31
CVSS: 6.1/10
Correctif: 3.0.31

MoyenneCVSS 6.1

CVE-2017-20054

XSS (Cross-Site Scripting) dans Contact Form Manager (<= 1.4.3)

Plugin: Contact Form Manager
Versions: <= 1.4.3
CVSS: 6.1/10
Correctif: 1.4.4

Contact Form Plugin

MoyenneCVSS 6.4

CVE-2017-20055

XSS stocké dans Contact Form Plugin (<= 4.0.1)

Plugin: Contact Form Plugin
Versions: <= 4.0.1
CVSS: 6.4/10
Correctif: 4.0.2

ÉlevéeCVSS 8.8

CVE-2017-20053

CSRF (Cross-Site Request Forgery) dans Contact Form Manager (<= 1.4.3)

Plugin: Contact Form Manager
Versions: <= 1.4.3
CVSS: 8.8/10
Correctif: 1.4.4

Ninja Forms – The Contact Form Builder That Grows With You

ÉlevéeCVSS 8.1

CVE-2016-1209

Injection d'objet PHP dans Ninja Forms – The Contact Form Builder That Grows With You (2.9.36 - 2.9.42)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: 2.9.36 - 2.9.42
CVSS: 8.1/10
Correctif: 2.9.42.1

MoyenneCVSS 6.1

CVE-2016-1000152

XSS (Cross-Site Scripting) dans Easy Contact Form Builder (<= 1.0)

Plugin: Easy Contact Form Builder
Versions: <= 1.0
CVSS: 6.1/10
Correctif: 1.1

Booking Calendar Contact Form

MoyenneCVSS 6.1

CVE-2016-10908

XSS réfléchi dans Booking Calendar Contact Form (<= 1.0.23)

Plugin: Booking Calendar Contact Form
Versions: <= 1.0.23
CVSS: 6.1/10
Correctif: 1.0.24

Booking Calendar Contact Form

CritiqueCVSS 9.8

CVE-2016-10909

Injection SQL dans Booking Calendar Contact Form (<= 1.0.24)

Plugin: Booking Calendar Contact Form
Versions: <= 1.0.24
CVSS: 9.8/10
Correctif: 1.0.24

Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More

ÉlevéeCVSS 8.8

CVE-2014-9309

Injection SQL dans Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More (<= 1.07.11)

Plugin: Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More
Versions: <= 1.07.11
CVSS: 8.8/10
Correctif: 2.0

MoyenneCVSS 6.1

CVE-2015-9539

XSS (Cross-Site Scripting) dans Fast Secure Contact Form (<= 4.0.37)

Plugin: Fast Secure Contact Form
Versions: <= 4.0.37
CVSS: 6.1/10
Correctif: 4.0.38

Contact Form Generator : Creative form builder for WordPress

MoyenneCVSS 6.3

CVE-2015-6965

CSRF (Cross-Site Request Forgery) dans Contact Form Generator : Creative form builder for WordPress (<= 2.1.86)

Plugin: Contact Form Generator : Creative form builder for WordPress
Versions: <= 2.1.86
CVSS: 6.3/10
Correctif: 2.5.0

CP Contact Form with PayPal

ÉlevéeCVSS 8.8

CVE-2015-9233

CSRF (Cross-Site Request Forgery) dans CP Contact Form with PayPal (<= 1.1.6)

Plugin: CP Contact Form with PayPal
Versions: <= 1.1.6
CVSS: 8.8/10
Correctif: 1.1.6

913 – 924 sur 950 articles