Plugin: WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More
Versions: <= 1.9.2.2
CVSS: 4.4/10
Correctif: 1.9.2.3

5 déc. 2024

Lire

Jetpack – WP Security, Backup, Speed, & Growth

MoyenneCVSS 6.1

CVE-2024-10858

XSS DOM dans Jetpack – WP Security, Backup, Speed, & Growth (13.0 - 14.0)

Plugin: Jetpack – WP Security, Backup, Speed, & Growth
Versions: 13.0 - 14.0
CVSS: 6.1/10
Correctif: 14.1

XSS stocké, authentifié (Auteur+), dans WPBITS Addons For Elementor Page Builder (<= 1.5.2)

Plugin: WPBITS Addons For Elementor Page Builder
Versions: <= 1.5.2
CVSS: 6.4/10
Correctif: 1.6

XSS stocké, authentifié (Contributeur+), dans WP eCards – Branded Digital Greeting Cards (<= 1.3.904)

Plugin: WP eCards – Branded Digital Greeting Cards
Versions: <= 1.3.904
CVSS: 6.4/10
Correctif: 1.3.905

Faille de sécurité, authentifié (Contributeur+), dans Classic Addons – WPBakery Page Builder (<= 3.0)

Plugin: Classic Addons – WPBakery Page Builder
Versions: <= 3.0
CVSS: 7.5/10
Correctif: 3.1

XSS réfléchi dans WP Job Manager – Company Profiles (<= 1.7)

Plugin: WP Job Manager – Company Profiles
Versions: <= 1.7
CVSS: 6.1/10
Correctif: 1.8

XSS réfléchi dans Exhibit to WP Gallery (<= 0.0.2)

Plugin: Exhibit to WP Gallery
Versions: <= 0.0.2
CVSS: 6.1/10
Correctif: Aucun

XSS stocké, authentifié (Contributeur+), dans WP Mailster (<= 1.8.17.0)

Plugin: WP Mailster
Versions: <= 1.8.17.0
CVSS: 6.4/10
Correctif: 1.8.18.0

Faille de sécurité, non authentifié, dans WP Mailster (<= 1.8.16.0)

Plugin: WP Mailster
Versions: <= 1.8.16.0
CVSS: 5.3/10
Correctif: 1.8.17.0

2 déc. 2024

Lire

1981 – 1992 sur 4375 articles