Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32211

Vulnérabilités (CVE)

Guides publiés

113

Publiés ce mois-ci

Filtre par plugin

pop up

Effacer

CritiqueCVSS 9.8

CVE-2020-9006

Injection d'objet PHP dans Popup Builder – Create highly converting, mobile friendly marketing popups. (2.2.8 - 2.6.7.6)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: 2.2.8 - 2.6.7.6
CVSS: 9.8/10
Correctif: 3.0

Divulgation d'informations, non authentifié, dans Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder (<= 1.8.12)

Plugin: Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder
Versions: <= 1.8.12
CVSS: 7.5/10
Correctif: 1.8.13

Injection SQL dans Popup Builder – Create highly converting, mobile friendly marketing popups. (<= 3.44)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: <= 3.44
CVSS: 9.8/10
Correctif: 3.45

XSS (Cross-Site Scripting) dans Icegram Engage – Popups, Optins, CTAs & Lead Generation (<= 1.10.28.2)

Plugin: Icegram Engage – Popups, Optins, CTAs & Lead Generation
Versions: <= 1.10.28.2
CVSS: 6.4/10
Correctif: 1.10.29

Élévation de privilèges dans Slick Popup: Contact Form 7 Popup Plugin (<= 1.7.2)

Plugin: Slick Popup: Contact Form 7 Popup Plugin
Versions: <= 1.7.2
CVSS: 8.8/10
Correctif: 1.7.2

Faille de sécurité, non authentifié, dans Hustle – Email Marketing, Lead Generation, Optins, Popups (<= 6.0.7)

Plugin: Hustle – Email Marketing, Lead Generation, Optins, Popups
Versions: <= 6.0.7
CVSS: 7.8/10
Correctif: 6.0.8.1

XSS réfléchi dans Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder (<= 1.6.5)

Plugin: Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder
Versions: <= 1.6.5
CVSS: 6.1/10
Correctif: 1.6.5

CSRF (Cross-Site Request Forgery) dans Smart Popup by Supsystic (<= 1.7.9)

Plugin: Smart Popup by Supsystic
Versions: <= 1.7.9
CVSS: 8.8/10
Correctif: 1.7.9

CSRF (Cross-Site Request Forgery) dans Icegram Engage – Popups, Optins, CTAs & Lead Generation (<= 1.9.19)

Plugin: Icegram Engage – Popups, Optins, CTAs & Lead Generation
Versions: <= 1.9.19
CVSS: 8.8/10
Correctif: 1.9.19

XSS (Cross-Site Scripting) dans Icegram Engage – Popups, Optins, CTAs & Lead Generation (<= 1.9.19)

Plugin: Icegram Engage – Popups, Optins, CTAs & Lead Generation
Versions: <= 1.9.19
CVSS: 6.1/10
Correctif: 1.9.19

Exécution de code à distance (RCE) dans Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation (<= 1.1.4.6)

Plugin: Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation
Versions: <= 1.1.4.6
CVSS: 5.3/10
Correctif: 1.1.4.6

XSS (Cross-Site Scripting) dans woo-popup (<= 1.2.2)

Plugin: woo-popup
Versions: <= 1.2.2
CVSS: 6.1/10
Correctif: 1.3.0

21 mai 2015

Lire

421 – 432 sur 435 articles