Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32062

Vulnérabilités (CVE)

1

Guides publiés

357

Publiés ce mois-ci

Filtre par plugin

a forms

ÉlevéeCVSS 8.1

CVE-2019-10869

Téléversement de fichier arbitraire, non authentifié, dans Ninja Forms - File Uploads (<= 3.0.23)

Plugin: Ninja Forms - File Uploads
Versions: <= 3.0.23
CVSS: 8.1/10
Correctif: 3.0.23

Smart Forms – when you need more than just a contact form

ÉlevéeCVSS 8.8

CVE-2019-5924

CSRF (Cross-Site Request Forgery) dans Smart Forms – when you need more than just a contact form (<= 2.6.26)

Plugin: Smart Forms – when you need more than just a contact form
Versions: <= 2.6.26
CVSS: 8.8/10
Correctif: 2.6.26

MoyenneCVSS 6.5

CVE-2019-25295

Traversée de répertoire dans WP Cost Estimation & Payment Forms Builder (<= 9.660)

Plugin: WP Cost Estimation & Payment Forms Builder
Versions: <= 9.660
CVSS: 6.5/10
Correctif: 9.660

CritiqueCVSS 9.8

CVE-2019-25296

Téléversement de fichier arbitraire dans WP Cost Estimation & Payment Forms Builder (<= 9.644)

Plugin: WP Cost Estimation & Payment Forms Builder
Versions: <= 9.644
CVSS: 9.8/10
Correctif: 9.644

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

MoyenneCVSS 6.1

CVE-2019-9567

XSS (Cross-Site Scripting) dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.6)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.6
CVSS: 6.1/10
Correctif: 1.6

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

MoyenneCVSS 6.5

CVE-2019-9568

Injection SQL dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.6)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.6
CVSS: 6.5/10
Correctif: 1.6

Ninja Forms – The Contact Form Builder That Grows With You

CritiqueCVSS 9.8

CVE-2019-15025

Injection SQL dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.21.1)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.21.1
CVSS: 9.8/10
Correctif: 3.3.21.2

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 4.7

CVE-2018-19796

Redirection ouverte, authentifié, dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.19)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.19
CVSS: 4.7/10
Correctif: 3.3.19.1

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 6.1

CVE-2018-19287

XSS (Cross-Site Scripting) dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.18)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.18
CVSS: 6.1/10
Correctif: 3.3.18

CritiqueCVSS 9.8

CVE-2018-21003

Injection SQL dans Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (<= 2.2.7)

Plugin: Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
Versions: <= 2.2.7
CVSS: 9.8/10
Correctif: 2.2.8

ÉlevéeCVSS 7.5

CVE-2018-15818

Suppression de fichier arbitraire, non authentifié, dans ARforms (<= 3.5.2)

Plugin: ARforms
Versions: <= 3.5.2
CVSS: 7.5/10
Correctif: 3.5.2

Ninja Forms – The Contact Form Builder That Grows With You

ÉlevéeCVSS 8.6

CVE-2018-16308

Faille de sécurité dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.3.13)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.3.13
CVSS: 8.6/10
Correctif: 3.3.14

985 – 996 sur 1042 articles