Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32 747

Vulnérabilités (CVE)

Guides publiés

Publiés ce mois-ci

Filtre par plugin

user login log

Effacer

CritiqueCVSS 9.8

CVE-2024-1071

Injection SQL, non authentifié, dans Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (2.1.3 - 2.8.2)

Plugin: Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
Versions: 2.1.3 - 2.8.2
CVSS: 9.8/10
Correctif: 2.8.3

XSS stocké, authentifié (Contributeur+), dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.15.0)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.15.0
CVSS: 6.4/10
Correctif: 4.15.1

CSRF (Cross-Site Request Forgery) dans RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (<= 5.2.5.9)

Plugin: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Versions: <= 5.2.5.9
CVSS: 4.3/10
Correctif: 5.2.6.0

XSS stocké, non authentifié, dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.14.4)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.14.4
CVSS: 6.5/10
Correctif: 4.15.0

XSS stocké, authentifié (Contributeur+), dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.14.4)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.14.4
CVSS: 6.4/10
Correctif: 4.15.0

XSS stocké, authentifié (Contributeur+), dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.14.4)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.14.4
CVSS: 6.4/10
Correctif: 4.15.0

XSS stocké, authentifié (Contributeur+), dans Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress (<= 4.14.3)

Plugin: Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
Versions: <= 4.14.3
CVSS: 6.4/10
Correctif: 4.14.4

Faille de sécurité dans RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (<= 5.2.5.0)

Plugin: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Versions: <= 5.2.5.0
CVSS: 5.3/10
Correctif: 5.2.5.1

Contournement d'authentification dans Login as User or Customer — User Switching (<= 3.8)

Plugin: Login as User or Customer — User Switching
Versions: <= 3.8
CVSS: 9.8/10
Correctif: 3.9.1

Faille de sécurité dans RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (<= 5.2.5.0)

Plugin: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Versions: <= 5.2.5.0
CVSS: 5.3/10
Correctif: 5.2.5.1

CSRF (Cross-Site Request Forgery) dans Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan (<= 4.35)

Plugin: Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan
Versions: <= 4.35
CVSS: 4.3/10
Correctif: 4.35

Injection SQL, authentifié (Administrateur+), dans RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (<= 5.2.4.6)

Plugin: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Versions: <= 5.2.4.6
CVSS: 6.6/10
Correctif: 5.2.4.6

21 déc. 2023

Lire

121 – 132 sur 234 articles

Votre site est-il exposé ?

Analysez-le gratuitement. En-têtes de sécurité, fichiers exposés et version détectable, en quelques secondes.

Analyser mon site gratuitement