Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32150

Vulnérabilités (CVE)

Guides publiés

Publiés ce mois-ci

Filtre par plugin

directory pro

Effacer

MoyenneCVSS 5.3

CVE-2024-12276

Injection SQL, authentifié, dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.9.2)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.9.2
CVSS: 5.3/10
Correctif: 2.10.0

Faille de sécurité dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.9.1)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.9.1
CVSS: 5.3/10
Correctif: 2.9.2

Injection SQL, non authentifié, dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.9.1)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.9.1
CVSS: 7.5/10
Correctif: 2.9.2

Défaut de contrôle d'accès, authentifié (Auteur+), dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.8.9)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.8.9
CVSS: 4.3/10
Correctif: 2.9.0

XSS stocké, authentifié (Contributeur+), dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.8.6)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.8.6
CVSS: 6.4/10
Correctif: 2.8.7

CSRF (Cross-Site Request Forgery) dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (<= 2.8.6)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: <= 2.8.6
CVSS: 5.3/10
Correctif: 2.8.7

Inclusion de fichier local (LFI), non authentifié, dans UsersControl – Users Profile, Free or Paid Subscriptions, User Access Restriction & Members Directory (<= 1.0.16)

Plugin: UsersControl – Users Profile, Free or Paid Subscriptions, User Access Restriction & Members Directory
Versions: <= 1.0.16
CVSS: 9.8/10
Correctif: Aucun

Défaut de contrôle d'accès dans UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP (<= 1.2.15)

Plugin: UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
Versions: <= 1.2.15
CVSS: 5.3/10
Correctif: 1.2.16

Injection SQL, authentifié (Administrateur+), dans User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration (<= 4.0.7)

Plugin: User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration
Versions: <= 4.0.7
CVSS: 9.1/10
Correctif: 4.0.8

Divulgation d'informations, non authentifié, dans UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP (<= 1.2.11)

Plugin: UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP
Versions: <= 1.2.11
CVSS: 5.3/10
Correctif: 1.2.12

Faille de sécurité, authentifié (Contributeur+), dans Paid Memberships Pro - Member Directory Add On (<= 1.2.6)

Plugin: Paid Memberships Pro - Member Directory Add On
Versions: <= 1.2.6
CVSS: 4.3/10
Correctif: 1.2.6

Inclusion de fichier local (LFI), authentifié (Contributeur+), dans Advanced Classifieds & Directory Pro (<= 3.1.3)

Plugin: Advanced Classifieds & Directory Pro
Versions: <= 3.1.3
CVSS: 8.8/10
Correctif: 3.2.1

4 juil. 2024

Lire

49 – 60 sur 110 articles