Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32253

Vulnérabilités (CVE)

Guides publiés

155

Publiés ce mois-ci

Filtre par plugin

Effacer

MoyenneCVSS 6.1

CVE-2019-20173

XSS (Cross-Site Scripting) dans Login by Auth0 (3.11.0 - 3.11.2)

Plugin: Login by Auth0
Versions: 3.11.0 - 3.11.2
CVSS: 6.1/10
Correctif: 3.11.3

Contournement d'authentification dans Slideshow, Image Slider by 2J (<= 1.3.31)

Plugin: Slideshow, Image Slider by 2J
Versions: <= 1.3.31
CVSS: 5.4/10
Correctif: 1.3.33

Contournement d'authentification dans Backup and Staging by WP Time Capsule (<= 1.21.16)

Plugin: Backup and Staging by WP Time Capsule
Versions: <= 1.21.16
CVSS: 9.8/10
Correctif: 1.21.16

XSS stocké dans Rich Reviews by Starfish (<= 1.7.4)

Plugin: Rich Reviews by Starfish
Versions: <= 1.7.4
CVSS: 7.2/10
Correctif: 1.8.0

Injection SQL dans Photo Gallery by 10Web – Mobile-Friendly Image Gallery (<= 1.5.35)

Plugin: Photo Gallery by 10Web – Mobile-Friendly Image Gallery
Versions: <= 1.5.35
CVSS: 9.8/10
Correctif: 1.5.35

XSS (Cross-Site Scripting) dans Photo Gallery by 10Web – Mobile-Friendly Image Gallery (<= 1.5.34)

Plugin: Photo Gallery by 10Web – Mobile-Friendly Image Gallery
Versions: <= 1.5.34
CVSS: 6.1/10
Correctif: 1.5.35

XSS (Cross-Site Scripting) dans Photo Gallery by 10Web – Mobile-Friendly Image Gallery (<= 1.5.35)

Plugin: Photo Gallery by 10Web – Mobile-Friendly Image Gallery
Versions: <= 1.5.35
CVSS: 6.1/10
Correctif: 1.5.35

XSS réfléchi dans Sender by BestWebSoft (<= 1.2.0)

Plugin: Sender by BestWebSoft
Versions: <= 1.2.0
CVSS: 6.1/10
Correctif: 1.2.1

XSS (Cross-Site Scripting) dans Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress (<= 4.0.2)

Plugin: Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress
Versions: <= 4.0.2
CVSS: 6.1/10
Correctif: 4.0.2

Faille de sécurité, non authentifié, dans Contact Form & SMTP Plugin for WordPress by PirateForms (<= 2.5.2)

Plugin: Contact Form & SMTP Plugin for WordPress by PirateForms
Versions: <= 2.5.2
CVSS: 7.2/10
Correctif: 2.5.2

Injection SQL dans Photo Gallery by 10Web – Mobile-Friendly Image Gallery (<= 1.5.31)

Plugin: Photo Gallery by 10Web – Mobile-Friendly Image Gallery
Versions: <= 1.5.31
CVSS: 9.8/10
Correctif: 1.5.31

Injection SQL dans Server Status by Hostname/IP (<= 4.6)

Plugin: Server Status by Hostname/IP
Versions: <= 4.6
CVSS: 8.8/10
Correctif: 5.0

1 juil. 2019

Lire

1057 – 1068 sur 1145 articles