Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32512

Vulnérabilités (CVE)

1

Guides publiés

135

Publiés ce mois-ci

Filtre par plugin

wordpres

ÉlevéeCVSS 8.8

CVE-2017-14842

Injection SQL, authentifié, dans SMSmaster – Multipurpose SMS Gateway for Wordpress (<= *)

Plugin: SMSmaster – Multipurpose SMS Gateway for Wordpress
Versions: <= *
CVSS: 8.8/10
Correctif: Aucun

ÉlevéeCVSS 8.8

CVE-2017-14847

Injection SQL dans WPAMS - Apartment Management System for wordpress (<= 17-07-2019)

Plugin: WPAMS - Apartment Management System for wordpress
Versions: <= 17-07-2019
CVSS: 8.8/10
Correctif: 17-07-2019

MC4WP: Mailchimp for WordPress

MoyenneCVSS 6.1

CVE-2017-18577

XSS (Cross-Site Scripting) dans MC4WP: Mailchimp for WordPress (<= 4.1.7)

Plugin: MC4WP: Mailchimp for WordPress
Versions: <= 4.1.7
CVSS: 6.1/10
Correctif: 4.1.8

BackWPup – WordPress Backup & Restore Plugin

ÉlevéeCVSS 7.5

CVE-2017-2551

Faille de sécurité, non authentifié, dans BackWPup – WordPress Backup & Restore Plugin (<= 3.4.2)

Plugin: BackWPup – WordPress Backup & Restore Plugin
Versions: <= 3.4.2
CVSS: 7.5/10
Correctif: 3.4.2

CritiqueCVSS 9.8

CVE-2017-1002028

Injection SQL dans wordpress-gallery-transformation (<= 0.7)

Plugin: wordpress-gallery-transformation
Versions: <= 0.7
CVSS: 9.8/10
Correctif: Aucun

MoyenneCVSS 5.4

CVE-2017-18601

XSS (Cross-Site Scripting) dans IBPS Online Exam Plugin for WordPress (<= 1.0)

Plugin: IBPS Online Exam Plugin for WordPress
Versions: <= 1.0
CVSS: 5.4/10
Correctif: Aucun

ÉlevéeCVSS 8.8

CVE-2017-18602

Injection SQL dans IBPS Online Exam Plugin for WordPress (<= 1.0)

Plugin: IBPS Online Exam Plugin for WordPress
Versions: <= 1.0
CVSS: 8.8/10
Correctif: Aucun

TablePress – Tables in WordPress made easy

MoyenneCVSS 4.3

CVE-2017-10889

Faille de sécurité dans TablePress – Tables in WordPress made easy (<= 1.8)

Plugin: TablePress – Tables in WordPress made easy
Versions: <= 1.8
CVSS: 4.3/10
Correctif: 1.8.1

PromoBar by BestWebSoft – Customizable Advertisement Banner for WordPress Website

MoyenneCVSS 6.1

CVE-2017-18529

XSS réfléchi dans PromoBar by BestWebSoft – Customizable Advertisement Banner for WordPress Website (<= 1.1.1)

Plugin: PromoBar by BestWebSoft – Customizable Advertisement Banner for WordPress Website
Versions: <= 1.1.1
CVSS: 6.1/10
Correctif: 1.1.1

Htaccess by BestWebSoft – WordPress Website Access Control Plugin

MoyenneCVSS 6.1

CVE-2017-18496

XSS réfléchi dans Htaccess by BestWebSoft – WordPress Website Access Control Plugin (<= 1.7.6)

Plugin: Htaccess by BestWebSoft – WordPress Website Access Control Plugin
Versions: <= 1.7.6
CVSS: 6.1/10
Correctif: 1.7.6

Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more

MoyenneCVSS 6.1

CVE-2017-7723

XSS (Cross-Site Scripting) dans Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more (<= 1.2.5)

Plugin: Easy WP SMTP – WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more
Versions: <= 1.2.5
CVSS: 6.1/10
Correctif: 1.2.5

PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin

MoyenneCVSS 6.1

CVE-2017-18528

XSS (Cross-Site Scripting) dans PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin (<= 1.9.4)

Plugin: PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin
Versions: <= 1.9.4
CVSS: 6.1/10
Correctif: 1.9.4

2617 – 2628 sur 2761 articles