Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32182

Vulnérabilités (CVE)

Guides publiés

Publiés ce mois-ci

Filtre par plugin

mobile builder

Effacer

ÉlevéeCVSS 7.2

CVE-2022-0228

Injection SQL, authentifié, dans Popup Builder – Create highly converting, mobile friendly marketing popups. (<= 4.0.7)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: <= 4.0.7
CVSS: 7.2/10
Correctif: 4.0.7

Inclusion de fichier local (LFI) dans Popup Builder – Create highly converting, mobile friendly marketing popups. (<= 4.0.7)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: <= 4.0.7
CVSS: 8.8/10
Correctif: 4.0.7

XSS stocké, authentifié, dans Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (<= 1.13.59)

Plugin: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Versions: <= 1.13.59
CVSS: 5.4/10
Correctif: 1.13.60

XSS réfléchi dans Popup Builder – Create highly converting, mobile friendly marketing popups. (<= 3.73)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: <= 3.73
CVSS: 6.1/10
Correctif: 3.74

XSS stocké, non authentifié, dans Popup Builder – Create highly converting, mobile friendly marketing popups. (<= 3.63)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: <= 3.63
CVSS: 8.3/10
Correctif: 3.64.1

Faille de sécurité, authentifié, dans Popup Builder – Create highly converting, mobile friendly marketing popups. (<= 3.63)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: <= 3.63
CVSS: 6.3/10
Correctif: 3.64.1

Injection d'objet PHP dans Popup Builder – Create highly converting, mobile friendly marketing popups. (2.2.8 - 2.6.7.6)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: 2.2.8 - 2.6.7.6
CVSS: 9.8/10
Correctif: 3.0

Injection SQL dans Popup Builder – Create highly converting, mobile friendly marketing popups. (<= 3.44)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: <= 3.44
CVSS: 9.8/10
Correctif: 3.45

Injection SQL, authentifié, dans Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (<= 1.13.3)

Plugin: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Versions: <= 1.13.3
CVSS: 8.8/10
Correctif: 1.13.3

CSRF (Cross-Site Request Forgery) dans Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (<= 1.13.4)

Plugin: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Versions: <= 1.13.4
CVSS: 8.1/10
Correctif: 1.13.5

Faille de sécurité dans Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (<= 1.12.22)

Plugin: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Versions: <= 1.12.22
CVSS: 7.8/10
Correctif: 1.12.22

Téléversement de fichier arbitraire dans Mobile App Builder by WapPress (<= 1.05)

Plugin: Mobile App Builder by WapPress
Versions: <= 1.05
CVSS: 9.8/10
Correctif: Aucun

7 mars 2017

Lire

61 – 72 sur 72 articles