Se connecter Démarrer l'essai

Blog

Alertes, guideset veille WordPress.

Vulnérabilités et maintenance WordPress, expliquées avec précision. Chaque article décrit le risque et la marche à suivre.

32657

Vulnérabilités (CVE)

1

Guides publiés

280

Publiés ce mois-ci

Filtre par plugin

forms

MoyenneCVSS 4.3

CVE-2025-10309

CSRF (Cross-Site Request Forgery) dans PayPal Forms (<= 1.0.3)

Plugin: PayPal Forms
Versions: <= 1.0.3
CVSS: 4.3/10
Correctif: Aucun

ÉlevéeCVSS 7.2

CVE-2025-58966

XSS stocké, non authentifié, dans NEX-Forms LITE (<= 8.2)

Plugin: NEX-Forms LITE
Versions: <= 8.2
CVSS: 7.2/10
Correctif: 8.2

Block for Mailchimp – Add Email Subscription Forms and Collect Leads

MoyenneCVSS 4.0

CVE-2025-10735

SSRF (Server-Side Request Forgery), non authentifié, dans Block for Mailchimp – Add Email Subscription Forms and Collect Leads (<= 1.1.12)

Plugin: Block for Mailchimp – Add Email Subscription Forms and Collect Leads
Versions: <= 1.1.12
CVSS: 4.0/10
Correctif: 1.1.13

WP Popup Builder – Popup Forms and Marketing Lead Generation

MoyenneCVSS 5.3

CVE-2025-62902

Faille de sécurité, non authentifié, dans WP Popup Builder – Popup Forms and Marketing Lead Generation (<= 1.3.8)

Plugin: WP Popup Builder – Popup Forms and Marketing Lead Generation
Versions: <= 1.3.8
CVSS: 5.3/10
Correctif: 1.3.9

MoyenneCVSS 4.3

CVE-2025-9898

CSRF (Cross-Site Request Forgery) dans cForms – Light speed fast Form Builder (<= 3.0.0)

Plugin: cForms – Light speed fast Form Builder
Versions: <= 3.0.0
CVSS: 4.3/10
Correctif: Aucun

MoyenneCVSS 6.1

CVE-2025-9899

CSRF (Cross-Site Request Forgery) dans Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms (<= 1.0)

Plugin: Trust Reviews plugin for Google, Tripadvisor, Yelp, Airbnb and other platforms
Versions: <= 1.0
CVSS: 6.1/10
Correctif: Aucun

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 4.3

CVE-2025-10499

CSRF (Cross-Site Request Forgery) dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.12.0)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.12.0
CVSS: 4.3/10
Correctif: 3.12.1

Ninja Forms – The Contact Form Builder That Grows With You

MoyenneCVSS 4.3

CVE-2025-10498

CSRF (Cross-Site Request Forgery) dans Ninja Forms – The Contact Form Builder That Grows With You (<= 3.12.0)

Plugin: Ninja Forms – The Contact Form Builder That Grows With You
Versions: <= 3.12.0
CVSS: 4.3/10
Correctif: 3.12.1

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI

MoyenneCVSS 6.5

CVE-2026-22422

Faille de sécurité, non authentifié, dans Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI (<= 3.4.1)

Plugin: Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI
Versions: <= 3.4.1
CVSS: 6.5/10
Correctif: 3.4.2

WP Gravity Forms HubSpot

MoyenneCVSS 4.3

CVE-2025-60151

Redirection ouverte dans WP Gravity Forms HubSpot (<= 1.2.5)

Plugin: WP Gravity Forms HubSpot
Versions: <= 1.2.5
CVSS: 4.3/10
Correctif: 1.2.6

MoyenneCVSS 4.3

CVE-2025-60166

Défaut de contrôle d'accès, authentifié (Auteur+), dans WP Subscription Forms PRO (<= 2.0.5)

Plugin: WP Subscription Forms PRO
Versions: <= 2.0.5
CVSS: 4.3/10
Correctif: Aucun

WP Gravity Forms Keap/Infusionsoft

MoyenneCVSS 4.3

CVE-2025-58006

Redirection ouverte dans WP Gravity Forms Keap/Infusionsoft (<= 1.2.6)

Plugin: WP Gravity Forms Keap/Infusionsoft
Versions: <= 1.2.6
CVSS: 4.3/10
Correctif: 1.2.7

277 – 288 sur 1092 articles

Votre site est-il exposé ?

Analysez-le gratuitement. En-têtes de sécurité, fichiers exposés et version détectable, en quelques secondes.

Analyser mon site gratuitement