Plugin: Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder
Versions: <= 1.16.4
CVSS: 5.5/10
Correctif: 1.16.5

19 avr. 2022

Lire

Bulk Edit and Create User Profiles – WP Sheet Editor

MoyenneCVSS 5.5

CVE-2022-1089

XSS (Cross-Site Scripting) dans Bulk Edit and Create User Profiles – WP Sheet Editor (<= 1.5.14)

Plugin: Bulk Edit and Create User Profiles – WP Sheet Editor
Versions: <= 1.5.14
CVSS: 5.5/10
Correctif: 1.5.14

XSS stocké, authentifié, dans WP Maintenance (<= 6.0.5)

Plugin: WP Maintenance
Versions: <= 6.0.5
CVSS: 5.5/10
Correctif: 6.0.6

XSS (Cross-Site Scripting) dans WP Social Buttons (<= 2.1)

Plugin: WP Social Buttons
Versions: <= 2.1
CVSS: 4.8/10
Correctif: 2.2

Injection SQL dans WP Video Gallery (<= 1.7.1)

Plugin: WP Video Gallery
Versions: <= 1.7.1
CVSS: 6.5/10
Correctif: Aucun

CSRF (Cross-Site Request Forgery) dans CalderaWP License Manager (<= 1.2.11)

Plugin: CalderaWP License Manager
Versions: <= 1.2.11
CVSS: 6.1/10
Correctif: Aucun

Téléversement de fichier arbitraire, authentifié, dans Import WP – Export and Import CSV and XML files to WordPress (<= 2.4.5)

Plugin: Import WP – Export and Import CSV and XML files to WordPress
Versions: <= 2.4.5
CVSS: 7.2/10
Correctif: 2.4.6

XSS stocké dans Social comments by WpDevArt (<= 2.4.9)

Plugin: Social comments by WpDevArt
Versions: <= 2.4.9
CVSS: 5.5/10
Correctif: 2.5.0

Lecture de fichier arbitraire, authentifié, dans WPvivid — Backup, Migration & Staging (<= 0.9.70)

Plugin: WPvivid — Backup, Migration & Staging
Versions: <= 0.9.70
CVSS: 4.9/10
Correctif: 0.9.71

XSS réfléchi dans UpdraftPlus: WP Backup & Migration Plugin (<= 1.22.9)

Plugin: UpdraftPlus: WP Backup & Migration Plugin
Versions: <= 1.22.9
CVSS: 6.1/10
Correctif: 1.22.9

7 avr. 2022

Lire

3733 – 3744 sur 4367 articles