Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32054

Vulnérabilités (CVE)

1

Guides publiés

349

Publiés ce mois-ci

Filtre par plugin

wp cal

WP Booking System – Booking Calendar

MoyenneCVSS 6.1

CVE-2024-8797

XSS réfléchi dans WP Booking System – Booking Calendar (<= 2.0.19.8)

Plugin: WP Booking System – Booking Calendar
Versions: <= 2.0.19.8
CVSS: 6.1/10
Correctif: 2.0.19.9

WP Simple Booking Calendar

MoyenneCVSS 6.1

CVE-2024-8663

XSS réfléchi dans WP Simple Booking Calendar (<= 2.0.10)

Plugin: WP Simple Booking Calendar
Versions: <= 2.0.10
CVSS: 6.1/10
Correctif: 2.0.11

CritiqueCVSS 9.8

CVE-2024-8292

Défaut de contrôle d'accès, non authentifié, dans WP-Recall – Registration, Profile, Commerce & More (<= 16.26.8)

Plugin: WP-Recall – Registration, Profile, Commerce & More
Versions: <= 16.26.8
CVSS: 9.8/10
Correctif: 16.26.9

WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce

MoyenneCVSS 6.4

CVE-2024-2691

XSS stocké, authentifié (Contributeur+), dans WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce (<= 3.1.43)

Plugin: WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce
Versions: <= 3.1.43
CVSS: 6.4/10
Correctif: 3.1.44

WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar

MoyenneCVSS 6.4

CVE-2024-38703

XSS stocké, authentifié (Contributeur+), dans WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar (<= 1.7.9)

Plugin: WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar
Versions: <= 1.7.9
CVSS: 6.4/10
Correctif: 1.8.0

MoyenneCVSS 5.3

CVE-2024-1175

Faille de sécurité, non authentifié, dans WP-Recall – Registration, Profile, Commerce & More (<= 16.26.6)

Plugin: WP-Recall – Registration, Profile, Commerce & More
Versions: <= 16.26.6
CVSS: 5.3/10
Correctif: 16.26.7

MoyenneCVSS 4.3

CVE-2024-35657

CSRF (Cross-Site Request Forgery) dans WP-Recall – Registration, Profile, Commerce & More (<= 16.26.6)

Plugin: WP-Recall – Registration, Profile, Commerce & More
Versions: <= 16.26.6
CVSS: 4.3/10
Correctif: 16.26.7

WPCal.io – Easy Meeting Scheduler

MoyenneCVSS 4.3

CVE-2024-32795

CSRF (Cross-Site Request Forgery) dans WPCal.io – Easy Meeting Scheduler (<= 0.9.5.8)

Plugin: WPCal.io – Easy Meeting Scheduler
Versions: <= 0.9.5.8
CVSS: 4.3/10
Correctif: 0.9.5.9

CritiqueCVSS 10.0

CVE-2024-32709

Injection SQL, non authentifié, dans WP-Recall – Registration, Profile, Commerce & More (<= 16.26.5)

Plugin: WP-Recall – Registration, Profile, Commerce & More
Versions: <= 16.26.5
CVSS: 10.0/10
Correctif: 16.26.6

CritiqueCVSS 9.9

CVE-2024-32710

Injection SQL, authentifié (Contributeur+), dans WP-Recall – Registration, Profile, Commerce & More (<= 16.26.5)

Plugin: WP-Recall – Registration, Profile, Commerce & More
Versions: <= 16.26.5
CVSS: 9.9/10
Correctif: 16.26.6

MoyenneCVSS 4.3

CVE-2024-32604

Défaut de contrôle d'accès dans WP-Recall – Registration, Profile, Commerce & More (<= 16.26.5)

Plugin: WP-Recall – Registration, Profile, Commerce & More
Versions: <= 16.26.5
CVSS: 4.3/10
Correctif: 16.26.6

Mortgage Calculators WP

MoyenneCVSS 6.4

CVE-2024-32581

XSS stocké, authentifié (Contributeur+), dans Mortgage Calculators WP (<= 1.56)

Plugin: Mortgage Calculators WP
Versions: <= 1.56
CVSS: 6.4/10
Correctif: 1.60

49 – 60 sur 92 articles