Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32062

Vulnérabilités (CVE)

1

Guides publiés

357

Publiés ce mois-ci

Filtre par plugin

ar for wordpress

FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce

ÉlevéeCVSS 7.2

CVE-2025-30795

Redirection ouverte dans FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce (<= 3.5.1)

Plugin: FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce
Versions: <= 3.5.1
CVSS: 7.2/10
Correctif: 3.5.2

Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More

MoyenneCVSS 6.4

CVE-2025-30770

XSS stocké, authentifié (Contributeur+), dans Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More (<= 1.8.4.7)

Plugin: Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More
Versions: <= 1.8.4.7
CVSS: 6.4/10
Correctif: 1.8.4.8

MoyenneCVSS 6.1

CVE-2025-28858

XSS réfléchi dans Arrow Maps – Custom Maps for WordPress (<= 1.0.9)

Plugin: Arrow Maps – Custom Maps for WordPress
Versions: <= 1.0.9
CVSS: 6.1/10
Correctif: Aucun

MoyenneCVSS 6.1

CVE-2025-28928

XSS réfléchi dans Are you robot google recaptcha for wordpress (<= 2.2)

Plugin: Are you robot google recaptcha for wordpress
Versions: <= 2.2
CVSS: 6.1/10
Correctif: Aucun

FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce

ÉlevéeCVSS 7.5

CVE-2025-2186

Injection SQL, non authentifié, dans FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce (<= 3.5.1)

Plugin: FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce
Versions: <= 3.5.1
CVSS: 7.5/10
Correctif: 3.5.2

Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution

MoyenneCVSS 6.4

CVE-2024-13805

XSS stocké, authentifié (Abonné+), dans Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution (<= 5.2.14)

Plugin: Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
Versions: <= 5.2.14
CVSS: 6.4/10
Correctif: 5.3.0

Notibar – Notification Bar for WordPress

MoyenneCVSS 5.5

CVE-2025-1672

XSS stocké, authentifié (Administrateur+), dans Notibar – Notification Bar for WordPress (<= 2.1.5)

Plugin: Notibar – Notification Bar for WordPress
Versions: <= 2.1.5
CVSS: 5.5/10
Correctif: 2.1.6

MoyenneCVSS 6.4

CVE-2024-11718

XSS stocké, authentifié (Auteur+), dans tarteaucitron.js for WordPress (<= 0.3.0)

Plugin: tarteaucitron.js for WordPress
Versions: <= 0.3.0
CVSS: 6.4/10
Correctif: 0.3.0

MoyenneCVSS 6.1

CVE-2024-11719

XSS stocké dans tarteaucitron.js for WordPress (<= 0.3.0)

Plugin: tarteaucitron.js for WordPress
Versions: <= 0.3.0
CVSS: 6.1/10
Correctif: 0.3.0

ÉlevéeCVSS 8.8

CVE-2024-9195

Faille de sécurité, authentifié (Abonné+), dans WHMCS Client Area for WordPress by WHMpress (<= 4.3-revision-3)

Plugin: WHMCS Client Area for WordPress by WHMpress
Versions: <= 4.3-revision-3
CVSS: 8.8/10
Correctif: Aucun

CritiqueCVSS 9.8

CVE-2025-26970

Exécution de code à distance (RCE), non authentifié, dans The Ark | WordPress Theme made for Freelancers (<= 1.70.0)

Plugin: The Ark | WordPress Theme made for Freelancers
Versions: <= 1.70.0
CVSS: 9.8/10
Correctif: 1.71.0

WP Templata – WordPress Template Library for Elementor

MoyenneCVSS 6.1

CVE-2025-26917

XSS réfléchi dans WP Templata – WordPress Template Library for Elementor (<= 1.0.7)

Plugin: WP Templata – WordPress Template Library for Elementor
Versions: <= 1.0.7
CVSS: 6.1/10
Correctif: 1.0.8

121 – 132 sur 383 articles