Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32512

Vulnérabilités (CVE)

Guides publiés

135

Publiés ce mois-ci

Filtre par plugin

wordpres

Effacer

CritiqueCVSS 9.8

CVE-2018-20984

Injection d'objet PHP dans Patreon WordPress (<= 1.2.2)

Plugin: Patreon WordPress
Versions: <= 1.2.2
CVSS: 9.8/10
Correctif: 1.2.2

XSS stocké dans Custom Product Tabs for WooCommerce & WordPress Tabs Builder – Smart Tabs (<= 1.8.0)

Plugin: Custom Product Tabs for WooCommerce & WordPress Tabs Builder – Smart Tabs
Versions: <= 1.8.0
CVSS: 5.4/10
Correctif: 2.0.0

XSS (Cross-Site Scripting) dans LearnPress – WordPress LMS Plugin for Create and Sell Online Courses (<= 3.0.12)

Plugin: LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
Versions: <= 3.0.12
CVSS: 6.1/10
Correctif: 3.1.0

Injection SQL, authentifié, dans LearnPress – WordPress LMS Plugin for Create and Sell Online Courses (<= 3.0.12)

Plugin: LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
Versions: <= 3.0.12
CVSS: 7.2/10
Correctif: 3.1.0

Redirection ouverte dans LearnPress – WordPress LMS Plugin for Create and Sell Online Courses (<= 3.0.12)

Plugin: LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
Versions: <= 3.0.12
CVSS: 6.1/10
Correctif: 3.1.0

XSS (Cross-Site Scripting) dans WP Editor.md – The Perfect WordPress Markdown Editor (<= 10.0.4)

Plugin: WP Editor.md – The Perfect WordPress Markdown Editor
Versions: <= 10.0.4
CVSS: 4.8/10
Correctif: 10.0.4

XSS (Cross-Site Scripting) dans WP Fastest Cache – WordPress Cache Plugin (<= 0.8.8.5)

Plugin: WP Fastest Cache – WordPress Cache Plugin
Versions: <= 0.8.8.5
CVSS: 6.1/10
Correctif: 0.8.8.6

CSRF (Cross-Site Request Forgery) dans WP Fastest Cache – WordPress Cache Plugin (<= 0.8.8.5)

Plugin: WP Fastest Cache – WordPress Cache Plugin
Versions: <= 0.8.8.5
CVSS: 8.8/10
Correctif: 0.8.8.6

XSS (Cross-Site Scripting) dans WP Fastest Cache – WordPress Cache Plugin (<= 0.8.8.5)

Plugin: WP Fastest Cache – WordPress Cache Plugin
Versions: <= 0.8.8.5
CVSS: 6.1/10
Correctif: 0.8.8.6

XSS (Cross-Site Scripting) dans WP Fastest Cache – WordPress Cache Plugin (<= 0.8.8.5)

Plugin: WP Fastest Cache – WordPress Cache Plugin
Versions: <= 0.8.8.5
CVSS: 6.1/10
Correctif: 0.8.8.6

XSS (Cross-Site Scripting), non authentifié, dans UserPro - Community and User Profile WordPress Plugin (<= 4.9.23)

Plugin: UserPro - Community and User Profile WordPress Plugin
Versions: <= 4.9.23
CVSS: 6.1/10
Correctif: 4.9.24

XSS (Cross-Site Scripting) dans Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress (<= 3.4.12)

Plugin: Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress
Versions: <= 3.4.12
CVSS: 6.1/10
Correctif: 3.5.0

28 mai 2018

Lire

2593 – 2604 sur 2761 articles