Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32054

Vulnérabilités (CVE)

1

Guides publiés

349

Publiés ce mois-ci

Filtre par plugin

woocommerce

ÉlevéeCVSS 7.2

CVE-2021-24511

Injection SQL, authentifié, dans Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More (<= 3.3.1.0)

Plugin: Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More
Versions: <= 3.3.1.0
CVSS: 7.2/10
Correctif: 3.3.1.0

Etsy Integration For WooCommerce

MoyenneCVSS 4.3

CVE-2021-4409

CSRF (Cross-Site Request Forgery) dans Etsy Integration For WooCommerce (<= 3.3.1)

Plugin: Etsy Integration For WooCommerce
Versions: <= 3.3.1
CVSS: 4.3/10
Correctif: 3.3.2

SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery

MoyenneCVSS 6.1

CVE-2021-24588

XSS (Cross-Site Scripting) dans SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery (<= 3.4.7)

Plugin: SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery
Versions: <= 3.4.7
CVSS: 6.1/10
Correctif: 3.4.7

WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce

MoyenneCVSS 5.5

CVE-2021-24561

XSS stocké, authentifié, dans WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce (<= 5.4.13)

Plugin: WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce
Versions: <= 5.4.13
CVSS: 5.5/10
Correctif: 5.4.13

Advanced Shipment Tracking for WooCommerce

CritiqueCVSS 9.9

CVE-2021-4347

Faille de sécurité, authentifié, dans Advanced Shipment Tracking for WooCommerce (<= 3.2.6)

Plugin: Advanced Shipment Tracking for WooCommerce
Versions: <= 3.2.6
CVSS: 9.9/10
Correctif: 3.2.7

FOX – Currency Switcher Professional for WooCommerce

ÉlevéeCVSS 8.8

CVE-2021-24566

Inclusion de fichier local (LFI), authentifié, dans FOX – Currency Switcher Professional for WooCommerce (<= 1.3.7)

Plugin: FOX – Currency Switcher Professional for WooCommerce
Versions: <= 1.3.7
CVSS: 8.8/10
Correctif: 1.3.7.1

WooCommerce

ÉlevéeCVSS 8.8

CVE-2021-32790

Injection SQL, authentifié, dans WooCommerce (<= 3.3)

Plugin: WooCommerce
Versions: <= 3.3
CVSS: 8.8/10
Correctif: 3.3.6

Abandoned Cart Recovery for WooCommerce

MoyenneCVSS 4.3

CVE-2021-4395

CSRF (Cross-Site Request Forgery) dans Abandoned Cart Recovery for WooCommerce (<= 1.0.4)

Plugin: Abandoned Cart Recovery for WooCommerce
Versions: <= 1.0.4
CVSS: 4.3/10
Correctif: 1.0.4.1

ÉlevéeCVSS 8.8

CVE-2021-32789

Injection SQL, authentifié, dans WooCommerce Blocks (<= 2.5.15)

Plugin: WooCommerce Blocks
Versions: <= 2.5.15
CVSS: 8.8/10
Correctif: 2.5.16

Ultimate Gift Cards for WooCommerce

MoyenneCVSS 4.3

CVE-2021-4391

CSRF (Cross-Site Request Forgery) dans Ultimate Gift Cards for WooCommerce (<= 2.1.1)

Plugin: Ultimate Gift Cards for WooCommerce
Versions: <= 2.1.1
CVSS: 4.3/10
Correctif: 2.1.2

Stock Manager for WooCommerce

ÉlevéeCVSS 8.8

CVE-2021-34619

CSRF (Cross-Site Request Forgery) dans Stock Manager for WooCommerce (<= 2.5.7)

Plugin: Stock Manager for WooCommerce
Versions: <= 2.5.7
CVSS: 8.8/10
Correctif: 2.6.0

CartFlows – Funnel Builder & Checkout Plugin for WooCommerce

MoyenneCVSS 4.8

CVE-2021-24330

XSS stocké, authentifié, dans CartFlows – Funnel Builder & Checkout Plugin for WooCommerce (<= 1.6.13)

Plugin: CartFlows – Funnel Builder & Checkout Plugin for WooCommerce
Versions: <= 1.6.13
CVSS: 4.8/10
Correctif: 1.6.13

2461 – 2472 sur 2544 articles