Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32346

Vulnérabilités (CVE)

Guides publiés

248

Publiés ce mois-ci

Filtre par plugin

a forms

Effacer

MoyenneCVSS 6.1

CVE-2018-19287

XSS (Cross-Site Scripting) dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.18)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.18
CVSS: 6.1/10
Correctif: 3.3.18

Injection SQL dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.2.7)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.2.7
CVSS: 9.8/10
Correctif: 2.2.8

Suppression de fichier arbitraire, non authentifié, dans ARforms (<= 3.5.2)

Plugin: ARforms
Versions: <= 3.5.2
CVSS: 7.5/10
Correctif: 3.5.2

Faille de sécurité dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.13)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.13
CVSS: 8.6/10
Correctif: 3.3.14

Faille de sécurité dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.8)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.8
CVSS: 9.1/10
Correctif: 3.3.9

Exécution de code à distance (RCE) dans Google Forms (<= 0.94)

Plugin: Google Forms
Versions: <= 0.94
CVSS: 7.5/10
Correctif: 0.94

Faille de sécurité dans Caldera Forms – More Than Contact Forms (<= 1.5.9.1)

Plugin: Caldera Forms – More Than Contact Forms
Versions: <= 1.5.9.1
CVSS: 5.5/10
Correctif: 1.6.0

Faille de sécurité dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.2.15)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.2.15
CVSS: 7.5/10
Correctif: 3.2.15

XSS (Cross-Site Scripting) dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.2.14)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.2.14
CVSS: 6.1/10
Correctif: 3.2.14

XSS (Cross-Site Scripting) dans Smart Marketing SMS and Newsletters Forms (<= 2.0.0)

Plugin: Smart Marketing SMS and Newsletters Forms
Versions: <= 2.0.0
CVSS: 6.1/10
Correctif: 2.0.0

XSS stocké, non authentifié, dans Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More (<= 2.05.03)

Plugin: Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More
Versions: <= 2.05.03
CVSS: 8.3/10
Correctif: 2.05.03

Divulgation d'informations, non authentifié, dans Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More (<= 2.05.03)

Plugin: Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More
Versions: <= 2.05.03
CVSS: 5.3/10
Correctif: 2.05.03

12 nov. 2017

Lire

1021 – 1032 sur 1070 articles