Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

33 056

Vulnérabilités (CVE)

Guides publiés

315

Publiés ce mois-ci

Filtre par plugin

Effacer

MoyenneCVSS 6.1

CVE-2026-89427

XSS réfléchi dans Ad Inserter – Ad Manager & AdSense Ads (<= 2.8.18)

Plugin: Ad Inserter – Ad Manager & AdSense Ads
Versions: <= 2.8.18
CVSS: 6.1/10
Correctif: 2.8.19

XSS stocké, non authentifié, dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.57.2)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.57.2
CVSS: 7.2/10
Correctif: 1.57.2.1

XSS stocké, non authentifié, dans PDF Invoices & Packing Slips for WooCommerce (<= 5.16.1)

Plugin: PDF Invoices & Packing Slips for WooCommerce
Versions: <= 5.16.1
CVSS: 7.2/10
Correctif: 5.16.2

XSS stocké, non authentifié, dans Business Essentials for Contact Form 7 (<= 1.2.1)

Plugin: Business Essentials for Contact Form 7
Versions: <= 1.2.1
CVSS: 7.2/10
Correctif: 1.2.2

Faille de sécurité, authentifié (Abonné+), dans Super Forms – Drag & Drop Form Builder (<= 6.3.316)

Plugin: Super Forms – Drag & Drop Form Builder
Versions: <= 6.3.316
CVSS: 8.1/10
Correctif: 6.3.317

XSS DOM dans Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More (<= 5.5.1.3)

Plugin: Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
Versions: <= 5.5.1.3
CVSS: 4.7/10
Correctif: 5.5.1.4

XSS DOM dans Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More (<= 5.5.1.3)

Plugin: Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More
Versions: <= 5.5.1.3
CVSS: 6.1/10
Correctif: 5.5.1.4

30 sept. 2026

Lire