Se connecter Démarrer

Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

31815

Vulnérabilités (CVE)

1

Guides publiés

110

Publiés ce mois-ci

Filtre par plugin

forms

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

MoyenneCVSS 6.5

CVE-2019-9568

Injection SQL dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.6)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.6
CVSS: 6.5/10
Correctif: 1.6

Ninja Forms – The Contact Form Builder That Grows With You

CritiqueCVSS 9.8

CVE-2019-15025

Injection SQL dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.21.1)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.21.1
CVSS: 9.8/10
Correctif: 3.3.21.2

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 4.7

CVE-2018-19796

Redirection ouverte, authentifié, dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.19)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.19
CVSS: 4.7/10
Correctif: 3.3.19.1

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 6.1

CVE-2018-19287

XSS (Cross-Site Scripting) dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.18)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.18
CVSS: 6.1/10
Correctif: 3.3.18

CritiqueCVSS 9.8

CVE-2018-21003

Injection SQL dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.2.7)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.2.7
CVSS: 9.8/10
Correctif: 2.2.8

ÉlevéeCVSS 7.5

CVE-2018-15818

Suppression de fichier arbitraire, non authentifié, dans ARforms (<= 3.5.2)

Plugin: ARforms
Versions: <= 3.5.2
CVSS: 7.5/10
Correctif: 3.5.2

Ninja Forms – The Contact Form Builder That Grows With You

ÉlevéeCVSS 8.6

CVE-2018-16308

Faille de sécurité dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.13)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.13
CVSS: 8.6/10
Correctif: 3.3.14

Ninja Forms – The Contact Form Builder That Grows With You

CritiqueCVSS 9.1

CVE-2018-20981

Faille de sécurité dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.8)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.8
CVSS: 9.1/10
Correctif: 3.3.9

ÉlevéeCVSS 7.5

CVE-2018-20988

Exécution de code à distance (RCE) dans Google Forms (<= 0.94)

Plugin: Google Forms
Versions: <= 0.94
CVSS: 7.5/10
Correctif: 0.94

MoyenneCVSS 5.5

CVE-2018-7747

Faille de sécurité dans Caldera Forms – More Than Contact Forms (<= 1.5.9.1)

Plugin: Caldera Forms – More Than Contact Forms
Versions: <= 1.5.9.1
CVSS: 5.5/10
Correctif: 1.6.0

Ninja Forms – The Contact Form Builder That Grows With You

ÉlevéeCVSS 7.5

CVE-2018-20980

Faille de sécurité dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.2.15)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.2.15
CVSS: 7.5/10
Correctif: 3.2.15

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 6.1

CVE-2018-7280

XSS (Cross-Site Scripting) dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.2.14)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.2.14
CVSS: 6.1/10
Correctif: 3.2.14

973 – 984 sur 1025 articles