Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32693

Vulnérabilités (CVE)

Guides publiés

316

Publiés ce mois-ci

Filtre par plugin

Effacer

MoyenneCVSS 6.4

CVE-2026-5717

XSS stocké, authentifié (Contributeur+), dans VI: Include Post By (<= 0.4.200706)

Plugin: VI: Include Post By
Versions: <= 0.4.200706
CVSS: 6.4/10
Correctif: Aucun

XSS stocké, non authentifié, dans Age Verification & Identity Verification by Token of Trust (<= 3.32.3)

Plugin: Age Verification & Identity Verification by Token of Trust
Versions: <= 3.32.3
CVSS: 7.2/10
Correctif: 3.32.4

XSS stocké, non authentifié, dans Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (<= 1.15.40)

Plugin: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Versions: <= 1.15.40
CVSS: 7.2/10
Correctif: 1.15.41

Injection SQL, non authentifié, dans Product Filter for WooCommerce by WBW (<= 3.1.2)

Plugin: Product Filter for WooCommerce by WBW
Versions: <= 3.1.2
CVSS: 7.5/10
Correctif: 3.1.3

Injection SQL, non authentifié, dans Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (<= 1.15.38)

Plugin: Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
Versions: <= 1.15.38
CVSS: 7.5/10
Correctif: 1.15.39

XSS stocké, authentifié (Contributeur+), dans Columns by BestWebSoft – Additional Columns Plugin for Posts Pages and Widgets (<= 1.0.3)

Plugin: Columns by BestWebSoft – Additional Columns Plugin for Posts Pages and Widgets
Versions: <= 1.0.3
CVSS: 6.4/10
Correctif: Aucun

XSS stocké, authentifié (Contributeur+), dans PowerPress Podcasting plugin by Blubrry (<= 11.15.15)

Plugin: PowerPress Podcasting plugin by Blubrry
Versions: <= 11.15.15
CVSS: 6.4/10
Correctif: 11.15.16

CSRF (Cross-Site Request Forgery) dans Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce (13.4.6 - 13.5.2.1)

Plugin: Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce
Versions: 13.4.6 - 13.5.2.1
CVSS: 8.8/10
Correctif: 13.5.2.2

CSRF (Cross-Site Request Forgery) dans BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net (<= 1.1.5)

Plugin: BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net
Versions: <= 1.1.5
CVSS: 6.5/10
Correctif: 1.1.6

CSRF (Cross-Site Request Forgery) dans BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net (<= 1.1.5)

Plugin: BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net
Versions: <= 1.1.5
CVSS: 4.3/10
Correctif: 1.1.6