Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32102

Vulnérabilités (CVE)

Guides publiés

Publiés ce mois-ci

MoyenneCVSS 6.1

CVE-2017-18542

XSS (Cross-Site Scripting) dans Help Center by BestWebSoft (<= 1.0.4)

Plugin: Help Center by BestWebSoft
Versions: <= 1.0.4
CVSS: 6.1/10
Correctif: 1.0.5

XSS (Cross-Site Scripting) dans Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress (<= 1.7.0)

Plugin: Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress
Versions: <= 1.7.0
CVSS: 6.1/10
Correctif: 1.7.1

Injection SQL dans SpiderCalendar (<= 1.5.51)

Plugin: SpiderCalendar
Versions: <= 1.5.51
CVSS: 9.8/10
Correctif: 1.5.52

XSS réfléchi dans Slideshow Gallery LITE (<= 1.6.5)

Plugin: Slideshow Gallery LITE
Versions: <= 1.6.5
CVSS: 6.1/10
Correctif: 1.6.6

CSRF (Cross-Site Request Forgery) dans WHIZZ (<= 1.1)

Plugin: WHIZZ
Versions: <= 1.1
CVSS: 8.8/10
Correctif: 1.1.1

CSRF (Cross-Site Request Forgery) dans CopySafe Web Protection – Copy Protect Images (<= 2.6)

Plugin: CopySafe Web Protection – Copy Protect Images
Versions: <= 2.6
CVSS: 6.5/10
Correctif: 2.6

XSS (Cross-Site Scripting) dans Twitter Cards Meta – Best Twitter Card Plugin for WordPress (<= 2.5.0)

Plugin: Twitter Cards Meta – Best Twitter Card Plugin for WordPress
Versions: <= 2.5.0
CVSS: 6.1/10
Correctif: 2.5.0

CSRF (Cross-Site Request Forgery) dans Twitter Cards Meta – Best Twitter Card Plugin for WordPress (<= 2.4.5)

Plugin: Twitter Cards Meta – Best Twitter Card Plugin for WordPress
Versions: <= 2.4.5
CVSS: 8.8/10
Correctif: 2.5.0

XSS (Cross-Site Scripting) dans Schema – All In One Schema Rich Snippets (<= 1.5.0)

Plugin: Schema – All In One Schema Rich Snippets
Versions: <= 1.5.0
CVSS: 6.1/10
Correctif: 1.5.0

Injection SQL dans Image Gallery with Slideshow Plugin (<= 1.5.2)

Plugin: Image Gallery with Slideshow Plugin
Versions: <= 1.5.2
CVSS: 9.8/10
Correctif: Aucun

XSS stocké dans Image Gallery with Slideshow Plugin (<= 1.5.2)

Plugin: Image Gallery with Slideshow Plugin
Versions: <= 1.5.2
CVSS: 5.4/10
Correctif: Aucun

Injection SQL dans Image Gallery with Slideshow Plugin (<= 1.5.2)

Plugin: Image Gallery with Slideshow Plugin
Versions: <= 1.5.2
CVSS: 9.8/10
Correctif: Aucun

1 avr. 2017

Lire

30637 – 30648 sur 32103 articles