Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32068

Vulnérabilités (CVE)

Guides publiés

363

Publiés ce mois-ci

Filtre par plugin

a forms

Effacer

MoyenneCVSS 6.4

CVE-2024-47642

XSS stocké, authentifié (Contributeur+), dans Keap Official Opt-in Forms (<= 2.0.3)

Plugin: Keap Official Opt-in Forms
Versions: <= 2.0.3
CVSS: 6.4/10
Correctif: Aucun

XSS stocké, authentifié (Contributeur+), dans Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More (<= 4.0)

Plugin: Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More
Versions: <= 4.0
CVSS: 6.4/10
Correctif: 4.0.1

Injection SQL, authentifié (Administrateur+), dans Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder (<= 2.13.11)

Plugin: Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder
Versions: <= 2.13.11
CVSS: 4.9/10
Correctif: 2.13.12

Téléversement de fichier arbitraire, authentifié (Administrateur+), dans Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder (<= 2.13.10)

Plugin: Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder
Versions: <= 2.13.10
CVSS: 7.2/10
Correctif: 2.13.11

XSS (Cross-Site Scripting) dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.8.15)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.8.15
CVSS: 4.7/10
Correctif: 3.8.16

XSS stocké, non authentifié, dans CubeWP Forms (<= 1.1.1)

Plugin: CubeWP Forms
Versions: <= 1.1.1
CVSS: 7.2/10
Correctif: 1.1.2

XSS stocké, non authentifié, dans Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder (<= 2.13.10)

Plugin: Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder
Versions: <= 2.13.10
CVSS: 7.2/10
Correctif: 2.13.11

XSS stocké, authentifié (Contributeur+), dans MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. (<= 1.2.70.3)

Plugin: MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.
Versions: <= 1.2.70.3
CVSS: 5.4/10
Correctif: 1.2.70.4

Élévation de privilèges, authentifié (Contributeur+), dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.8.11)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.8.11
CVSS: 8.8/10
Correctif: 2.8.12

13 sept. 2024

Lire