Se connecter Démarrer

Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31875

Vulnérabilités (CVE)

1

Guides publiés

170

Publiés ce mois-ci

Filtre par plugin

grid

ProfileGrid – User Profiles, Groups and Communities

MoyenneCVSS 4.3

CVE-2025-52719

Faille de sécurité, authentifié (Abonné+), dans ProfileGrid – User Profiles, Groups and Communities (<= 5.9.5.2)

Plugin: ProfileGrid – User Profiles, Groups and Communities
Versions: <= 5.9.5.2
CVSS: 4.3/10
Correctif: 5.9.5.3

Post and Page Builder by BoldGrid – Visual Drag and Drop Editor

MoyenneCVSS 4.3

CVE-2025-52711

CSRF (Cross-Site Request Forgery) dans Post and Page Builder by BoldGrid – Visual Drag and Drop Editor (<= 1.27.8)

Plugin: Post and Page Builder by BoldGrid – Visual Drag and Drop Editor
Versions: <= 1.27.8
CVSS: 4.3/10
Correctif: 1.27.9

ProfileGrid – User Profiles, Groups and Communities

MoyenneCVSS 6.4

CVE-2025-49877

SSRF (Server-Side Request Forgery), authentifié (Abonné+), dans ProfileGrid – User Profiles, Groups and Communities (<= 5.9.5.2)

Plugin: ProfileGrid – User Profiles, Groups and Communities
Versions: <= 5.9.5.2
CVSS: 6.4/10
Correctif: 5.9.5.3

Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery

MoyenneCVSS 5.3

CVE-2025-49451

Traversée de répertoire, non authentifié, dans Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery (<= 1.0.12)

Plugin: Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery
Versions: <= 1.0.12
CVSS: 5.3/10
Correctif: Aucun

Post Grid Master — Post Grids & AJAX Filters

MoyenneCVSS 4.3

CVE-2025-30974

Défaut de contrôle d'accès dans Post Grid Master — Post Grids & AJAX Filters (<= 3.4.14)

Plugin: Post Grid Master — Post Grids & AJAX Filters
Versions: <= 3.4.14
CVSS: 4.3/10
Correctif: Aucun

ProfileGrid – User Profiles, Groups and Communities

MoyenneCVSS 4.3

CVE-2025-48079

Défaut de contrôle d'accès dans ProfileGrid – User Profiles, Groups and Communities (<= 5.9.5.1)

Plugin: ProfileGrid – User Profiles, Groups and Communities
Versions: <= 5.9.5.1
CVSS: 4.3/10
Correctif: 5.9.5.2

ProfileGrid – User Profiles, Groups and Communities

MoyenneCVSS 6.5

CVE-2025-47478

Injection SQL, authentifié (Abonné+), dans ProfileGrid – User Profiles, Groups and Communities (<= 5.9.5.0)

Plugin: ProfileGrid – User Profiles, Groups and Communities
Versions: <= 5.9.5.0
CVSS: 6.5/10
Correctif: 5.9.5.1

BlockSpare – Gutenberg Post Grid Blocks for News, Magazine & Blog Websites

MoyenneCVSS 6.4

CVE-2025-47495

XSS stocké, authentifié (Contributeur+), dans BlockSpare – Gutenberg Post Grid Blocks for News, Magazine & Blog Websites (<= 3.2.9)

Plugin: BlockSpare – Gutenberg Post Grid Blocks for News, Magazine & Blog Websites
Versions: <= 3.2.9
CVSS: 6.4/10
Correctif: 3.2.10

MoyenneCVSS 6.4

CVE-2025-46503

SSRF (Server-Side Request Forgery), authentifié (Contributeur+), dans Simple Google Photos Grid (<= 1.5)

Plugin: Simple Google Photos Grid
Versions: <= 1.5
CVSS: 6.4/10
Correctif: 1.6

ProfileGrid – User Profiles, Groups and Communities

MoyenneCVSS 6.5

CVE-2025-39586

Injection SQL, authentifié (Abonné+), dans ProfileGrid – User Profiles, Groups and Communities (<= 5.9.4.8)

Plugin: ProfileGrid – User Profiles, Groups and Communities
Versions: <= 5.9.4.8
CVSS: 6.5/10
Correctif: 5.9.4.9

ÉlevéeCVSS 8.8

CVE-2025-32499

Inclusion de fichier local (LFI), authentifié (Contributeur+), dans Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid (<= 1.4.4)

Plugin: Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid
Versions: <= 1.4.4
CVSS: 8.8/10
Correctif: 1.4.5

Modula Image Gallery – Photo Grid & Video Gallery

MoyenneCVSS 6.4

CVE-2024-9416

XSS DOM, authentifié (Contributeur+), dans Modula Image Gallery – Photo Grid & Video Gallery (<= 2.10.1)

Plugin: Modula Image Gallery – Photo Grid & Video Gallery
Versions: <= 2.10.1
CVSS: 6.4/10
Correctif: 2.10.2

85 – 96 sur 342 articles