Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32054

Vulnérabilités (CVE)

Guides publiés

349

Publiés ce mois-ci

Filtre par plugin

wp cal

Effacer

WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

MoyenneCVSS 4.4

CVE-2023-4423

XSS stocké, authentifié, dans WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce (<= 3.1.37.1)

Plugin: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
Versions: <= 3.1.37.1
CVSS: 4.4/10
Correctif: 3.1.38

CSRF (Cross-Site Request Forgery) dans WP iCal Availability (<= 1.0.3)

Plugin: WP iCal Availability
Versions: <= 1.0.3
CVSS: 4.3/10
Correctif: Aucun

XSS réfléchi dans WP Responsive Tabs horizontal vertical and accordion Tabs (<= 1.1.15)

Plugin: WP Responsive Tabs horizontal vertical and accordion Tabs
Versions: <= 1.1.15
CVSS: 6.1/10
Correctif: 1.1.16

SSRF (Server-Side Request Forgery), authentifié (Abonné+), dans Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar (<= 2.0.28)

Plugin: Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar
Versions: <= 2.0.28
CVSS: 6.3/10
Correctif: 2.0.29

XSS réfléchi dans WP Responsive Tabs horizontal vertical and accordion Tabs (<= 1.1.15)

Plugin: WP Responsive Tabs horizontal vertical and accordion Tabs
Versions: <= 1.1.15
CVSS: 6.1/10
Correctif: 1.1.16

Faille de sécurité, authentifié, dans WP Booking System – Booking Calendar (<= 2.0.18)

Plugin: WP Booking System – Booking Calendar
Versions: <= 2.0.18
CVSS: 4.4/10
Correctif: 2.0.18.1

Défaut de contrôle d'accès dans WP FullCalendar (<= 1.4.1)

Plugin: WP FullCalendar
Versions: <= 1.4.1
CVSS: 6.5/10
Correctif: 1.5

XSS (Cross-Site Scripting), authentifié (Contributeur+), dans WP Calendar (<= 1.5.3)

Plugin: WP Calendar
Versions: <= 1.5.3
CVSS: 6.4/10
Correctif: Aucun

Faille de sécurité dans WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce (<= 3.1.28)

Plugin: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
Versions: <= 3.1.28
CVSS: 6.1/10
Correctif: 3.1.28

CSRF (Cross-Site Request Forgery) dans CalderaWP License Manager (<= 1.2.11)

Plugin: CalderaWP License Manager
Versions: <= 1.2.11
CVSS: 6.1/10
Correctif: Aucun

XSS stocké dans WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce (<= 3.1.22)

Plugin: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
Versions: <= 3.1.22
CVSS: 4.8/10
Correctif: 3.1.23

XSS stocké, authentifié, dans Mortgage Calculators WP (<= 1.53)

Plugin: Mortgage Calculators WP
Versions: <= 1.53
CVSS: 4.8/10
Correctif: 1.53

11 janv. 2022

Lire

73 – 84 sur 92 articles