Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32346

Vulnérabilités (CVE)

1

Guides publiés

248

Publiés ce mois-ci

Filtre par plugin

forms

Wise Agent Lead Forms

MoyenneCVSS 6.1

CVE-2021-38335

XSS réfléchi dans Wise Agent Lead Forms (<= 2.0)

Plugin: Wise Agent Lead Forms
Versions: <= 2.0
CVSS: 6.1/10
Correctif: 3.0

MoyenneCVSS 5.5

CVE-2021-24513

XSS stocké, authentifié, dans Form Builder | Create Responsive Contact Forms (<= 1.9.8.3)

Plugin: Form Builder | Create Responsive Contact Forms
Versions: <= 1.9.8.3
CVSS: 5.5/10
Correctif: 1.9.8.4

MoyenneCVSS 5.5

CVE-2021-24596

XSS stocké dans youForms for WordPress – Creating Forms for CopeCart (<= 1.0.5)

Plugin: youForms for WordPress – Creating Forms for CopeCart
Versions: <= 1.0.5
CVSS: 5.5/10
Correctif: 1.0.6

CritiqueCVSS 9.8

CVE-2021-24527

Faille de sécurité dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 3.4.9)

Plugin: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Versions: <= 3.4.9
CVSS: 9.8/10
Correctif: 3.4.9

NEX-Forms – Ultimate Forms Plugin for WordPress

MoyenneCVSS 4.3

CVE-2021-34676

Contournement d'authentification dans NEX-Forms – Ultimate Forms Plugin for WordPress (<= 7.8.7)

Plugin: NEX-Forms – Ultimate Forms Plugin for WordPress
Versions: <= 7.8.7
CVSS: 4.3/10
Correctif: 7.8.8

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

ÉlevéeCVSS 7.2

CVE-2021-36821

XSS stocké, non authentifié, dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.14.12)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.14.12
CVSS: 7.2/10
Correctif: 1.14.12

Forms

MoyenneCVSS 5.5

CVE-2021-24505

XSS stocké, authentifié, dans Forms (<= 1.12.3)

Plugin: Forms
Versions: <= 1.12.3
CVSS: 5.5/10
Correctif: 1.12.3

MoyenneCVSS 5.5

CVE-2021-24448

XSS stocké, authentifié (Administrateur+), dans User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (<= 3.4.7)

Plugin: User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Versions: <= 3.4.7
CVSS: 5.5/10
Correctif: 3.4.8

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

ÉlevéeCVSS 8.8

CVE-2021-34620

XSS stocké dans Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder (<= 3.6.67)

Plugin: Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
Versions: <= 3.6.67
CVSS: 8.8/10
Correctif: 3.6.67

Request a Quote – Quote Forms for Any WordPress Site

MoyenneCVSS 5.4

CVE-2021-24420

XSS stocké, authentifié, dans Request a Quote – Quote Forms for Any WordPress Site (<= 2.3.4)

Plugin: Request a Quote – Quote Forms for Any WordPress Site
Versions: <= 2.3.4
CVSS: 5.4/10
Correctif: 2.3.4

ÉlevéeCVSS 7.5

CVE-2021-34675

Contournement d'authentification dans nex-forms (<= 7.8.7)

Plugin: nex-forms
Versions: <= 7.8.7
CVSS: 7.5/10
Correctif: 7.8.8

Payment forms, Buy now buttons, and Invoicing System | GetPaid

MoyenneCVSS 5.4

CVE-2021-24369

XSS stocké, authentifié, dans Payment forms, Buy now buttons, and Invoicing System | GetPaid (<= 2.3.3)

Plugin: Payment forms, Buy now buttons, and Invoicing System | GetPaid
Versions: <= 2.3.3
CVSS: 5.4/10
Correctif: 2.3.4

961 – 972 sur 1070 articles