Blog

Alertes, guides et veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

5053

Vulnérabilités (CVE)

Guides publiés

Publiés ce mois-ci

Filtre par plugin

directory pro

Effacer

MoyenneCVSS 6.4

CVE-2026-8489

XSS stocké, authentifié (Abonné+), dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.11.4)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.11.4
CVSS: 6.4/10
Correctif: 2.12.0

Défaut de contrôle d'accès, authentifié (Éditeur+), dans UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP (<= 1.2.63)

Plugin: UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
Versions: <= 1.2.63
CVSS: 2.7/10
Correctif: 1.2.64

Défaut de contrôle d'accès, authentifié (Auteur+), dans User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration (<= 4.3.2)

Plugin: User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
Versions: <= 4.3.2
CVSS: 4.3/10
Correctif: 4.3.3

Injection d'objet PHP, authentifié (Abonné+), dans User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration (<= 4.3.1)

Plugin: User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
Versions: <= 4.3.1
CVSS: 8.8/10
Correctif: 4.3.2

Défaut de contrôle d'accès dans User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration (<= 4.3.1)

Plugin: User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
Versions: <= 4.3.1
CVSS: 5.3/10
Correctif: 4.3.2

SSRF (Server-Side Request Forgery), authentifié (Abonné+), dans UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP (<= 1.2.58)

Plugin: UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
Versions: <= 1.2.58
CVSS: 5.0/10
Correctif: 1.2.59

Faille de sécurité, authentifié (Abonné+), dans UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP (<= 1.2.58)

Plugin: UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
Versions: <= 1.2.58
CVSS: 4.3/10
Correctif: 1.2.59

XSS stocké, authentifié (Abonné+), dans UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP (<= 1.2.60)

Plugin: UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
Versions: <= 1.2.60
CVSS: 6.4/10
Correctif: 1.2.61

XSS stocké, authentifié (Abonné+), dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.11.1)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.11.1
CVSS: 6.4/10
Correctif: 2.11.2

Prise de contrôle de compte, authentifié (Contributeur+), dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.11.2)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.11.2
CVSS: 8.0/10
Correctif: 2.11.3

Défaut de contrôle d'accès dans User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration (<= 4.2.8)

Plugin: User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
Versions: <= 4.2.8
CVSS: 5.3/10
Correctif: 4.2.9

Défaut de contrôle d'accès, non authentifié, dans User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration (<= 4.2.8)

Plugin: User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration
Versions: <= 4.2.8
CVSS: 5.3/10
Correctif: 4.2.9

14 mars 2026

Lire

1 – 12 sur 26 articles