Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32284

Vulnérabilités (CVE)

1

Guides publiés

186

Publiés ce mois-ci

Filtre par plugin

wp

GiveWP – Donation Plugin and Fundraising Platform

MoyenneCVSS 6.4

CVE-2023-23668

XSS stocké, authentifié (Contributeur+), dans GiveWP – Donation Plugin and Fundraising Platform (<= 2.25.1)

Plugin: GiveWP – Donation Plugin and Fundraising Platform
Versions: <= 2.25.1
CVSS: 6.4/10
Correctif: 2.25.2

GiveWP – Donation Plugin and Fundraising Platform

MoyenneCVSS 4.3

CVE-2023-25450

CSRF (Cross-Site Request Forgery) dans GiveWP – Donation Plugin and Fundraising Platform (<= 2.25.1)

Plugin: GiveWP – Donation Plugin and Fundraising Platform
Versions: <= 2.25.1
CVSS: 4.3/10
Correctif: 2.25.2

MoyenneCVSS 6.4

CVE-2023-0399

XSS stocké, authentifié (Contributeur+), dans Image Over Image For WPBakery Page Builder (<= 3.0)

Plugin: Image Over Image For WPBakery Page Builder
Versions: <= 3.0
CVSS: 6.4/10
Correctif: 3.0

GiveWP – Donation Plugin and Fundraising Platform

MoyenneCVSS 4.1

CVE-2022-40312

SSRF (Server-Side Request Forgery), authentifié, dans GiveWP – Donation Plugin and Fundraising Platform (<= 2.25.1)

Plugin: GiveWP – Donation Plugin and Fundraising Platform
Versions: <= 2.25.1
CVSS: 4.1/10
Correctif: 2.25.2

GiveWP – Donation Plugin and Fundraising Platform

ÉlevéeCVSS 8.3

CVE-2023-22719

Faille de sécurité, non authentifié, dans GiveWP – Donation Plugin and Fundraising Platform (<= 2.25.1)

Plugin: GiveWP – Donation Plugin and Fundraising Platform
Versions: <= 2.25.1
CVSS: 8.3/10
Correctif: 2.25.2

WP Statistics – Simple, privacy-friendly Google Analytics alternative

ÉlevéeCVSS 7.2

CVE-2023-0955

Injection SQL, authentifié, dans WP Statistics – Simple, privacy-friendly Google Analytics alternative (<= 13.2.16)

Plugin: WP Statistics – Simple, privacy-friendly Google Analytics alternative
Versions: <= 13.2.16
CVSS: 7.2/10
Correctif: 14.0

WP Dark Mode – Improve Accessibility with AI Powered Dark Theme

ÉlevéeCVSS 8.8

CVE-2023-0467

Inclusion de fichier local (LFI), authentifié (Abonné+), dans WP Dark Mode – Improve Accessibility with AI Powered Dark Theme (<= 4.0.7)

Plugin: WP Dark Mode – Improve Accessibility with AI Powered Dark Theme
Versions: <= 4.0.7
CVSS: 8.8/10
Correctif: 4.0.8

MoyenneCVSS 4.3

CVE-2023-25034

CSRF (Cross-Site Request Forgery) dans WP Clean Up (<= 1.2.3)

Plugin: WP Clean Up
Versions: <= 1.2.3
CVSS: 4.3/10
Correctif: Aucun

FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider

CVE-2023-0219

XSS stocké, authentifié (Auteur+), dans FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider (<= 2.2.2)

Plugin: FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider
Versions: <= 2.2.2
CVSS: 3.8/10
Correctif: 2.2.3

MoyenneCVSS 4.3

CVE-2023-27438

CSRF (Cross-Site Request Forgery) dans WP Translitera (<= p1.2.5)

Plugin: WP Translitera
Versions: <= p1.2.5
CVSS: 4.3/10
Correctif: Aucun

WpStream – Live Streaming, Video on Demand, Pay Per View

MoyenneCVSS 4.3

CVE-2023-27458

CSRF (Cross-Site Request Forgery) dans WpStream – Live Streaming, Video on Demand, Pay Per View (<= 4.4.10)

Plugin: WpStream – Live Streaming, Video on Demand, Pay Per View
Versions: <= 4.4.10
CVSS: 4.3/10
Correctif: 4.4.10.6

WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce

MoyenneCVSS 5.3

CVE-2023-27447

Divulgation d'informations dans WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce (<= 6.0.4)

Plugin: WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce
Versions: <= 6.0.4
CVSS: 5.3/10
Correctif: 6.0.4.1

3337 – 3348 sur 4368 articles