Alertes, guideset veille WordPress.

Filtre par plugin

contact form x

Effacer

Drag and Drop Multiple File Upload for Contact Form 7

ÉlevéeCVSS 8.1

CVE-2023-5822

Téléversement de fichier arbitraire, non authentifié, dans Drag and Drop Multiple File Upload for Contact Form 7 (<= 1.3.7.3)

Plugin: Drag and Drop Multiple File Upload for Contact Form 7
Versions: <= 1.3.7.3
CVSS: 8.1/10
Correctif: 1.3.7.4

1 nov. 2023

Lire

MoyenneCVSS 6.5

CVE-2023-5386

Défaut de contrôle d'accès dans Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free (<= 3.4)

Plugin: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Versions: <= 3.4
CVSS: 6.5/10
Correctif: 3.4.2

1 nov. 2023

Lire

MoyenneCVSS 4.3

CVE-2023-5419

Défaut de contrôle d'accès dans Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free (<= 3.4)

Plugin: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Versions: <= 3.4
CVSS: 4.3/10
Correctif: 3.4.2

1 nov. 2023

Lire

MoyenneCVSS 4.3

CVE-2023-5416

Défaut de contrôle d'accès dans Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free (<= 3.4)

Plugin: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Versions: <= 3.4
CVSS: 4.3/10
Correctif: 3.4.2

1 nov. 2023

Lire

MoyenneCVSS 4.3

CVE-2023-5387

Défaut de contrôle d'accès dans Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free (<= 3.4)

Plugin: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Versions: <= 3.4
CVSS: 4.3/10
Correctif: 3.4.2

1 nov. 2023

Lire

MoyenneCVSS 4.3

CVE-2023-5383

CSRF (Cross-Site Request Forgery) dans Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free (<= 3.4)

Plugin: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Versions: <= 3.4
CVSS: 4.3/10
Correctif: 3.4.2

1 nov. 2023

Lire

MoyenneCVSS 4.3

CVE-2023-5385

Défaut de contrôle d'accès dans Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free (<= 3.4)

Plugin: Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free
Versions: <= 3.4
CVSS: 4.3/10
Correctif: 3.4.2

1 nov. 2023

Lire

MoyenneCVSS 4.4

CVE-2023-46824

XSS stocké, authentifié, dans Slick Popup: Contact Form 7 Popup Plugin (<= 1.7.15)

Plugin: Slick Popup: Contact Form 7 Popup Plugin
Versions: <= 1.7.15
CVSS: 4.4/10
Correctif: 1.7.15

29 oct. 2023

Lire

Forminator Forms – Contact Form, Payment Form & Custom Form Builder

MoyenneCVSS 4.4

CVE-2023-5119

XSS stocké, authentifié, dans Forminator Forms – Contact Form, Payment Form & Custom Form Builder (<= 1.26.0)

Plugin: Forminator Forms – Contact Form, Payment Form & Custom Form Builder
Versions: <= 1.26.0
CVSS: 4.4/10
Correctif: 1.27.0

27 oct. 2023

Lire

MoyenneCVSS 4.4

CVE-2023-5343

XSS stocké, authentifié, dans Popup Box – Create Countdown, Coupon, Video, Contact Form Popups (<= 3.7.8)

Plugin: Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
Versions: <= 3.7.8
CVSS: 4.4/10
Correctif: 3.7.9

27 oct. 2023

Lire

MoyenneCVSS 4.3

CVE-2023-47230

CSRF (Cross-Site Request Forgery) dans Contact Forms by Cimatti (<= 1.6.0)

Plugin: Contact Forms by Cimatti
Versions: <= 1.6.0
CVSS: 4.3/10
Correctif: 1.6.1

25 oct. 2023

Lire

MoyenneCVSS 6.4

CVE-2023-5048

XSS stocké, authentifié (Contributeur+), dans WDContactFormBuilder (<= 1.0.72)

Plugin: WDContactFormBuilder
Versions: <= 1.0.72
CVSS: 6.4/10
Correctif: Aucun