La semaine dernière, 82 vulnérabilités ont été révélées dans 59 plugins et 11 thèmes WordPress, ainsi que 6 dans WordPress Core qui ont été ajoutées à la base de données des vulnérabilités de Wordfence Intelligence par l’équipe de renseignements sur les menaces de Wordfence.
🎉 Nous tenons à remercier tout particulièrement les 26 chercheurs de vulnérabilités qui ont contribué à la sécurité de WordPress en divulguant ces vulnérabilités de manière responsable !
L’équipe a également déployé 7 nouvelles règles de pare-feu qui offrent aux clients de Wordfence Premium, Care et Response une protection renforcée contre une vulnérabilité qui a déjà commencé à voir une exploitation active. Les utilisateurs gratuits de Wordfence recevront cette protection après un délai de 30 jours.
Au Farweb, nous avons bien mis à jour les plugins et les thèmes concernés afin que ceux-ci ne soient plus un risque pour votre site Internet.
La mission du plugin de sécurité Wordfence Intelligence est de rendre des informations sur les vulnérabilités facilement accessibles à tous. Cette article a été traduit directement depuis leur newsletter.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
| Unpatched | 15 |
| Patched | 67 |
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
| AI Engine: ChatGPT Chatbot, Content Generator, GPT 3 & 4, Ultra-Customizable | ai-engine |
| AutomateWoo | automatewoo |
| BP Social Connect | bp-social-connect |
| Baidu Tongji generator | baidu-tongji-generator |
| Contact Form by Supsystic | contact-form-by-supsystic |
| ConvertKit – Email Marketing, Newsletter, Subscribers and Landing Pages | convertkit |
| Cookie Monster | cookiemonster |
| Custom 404 Pro | custom-404-pro |
| Customize WordPress Emails and Alerts – Better Notifications for WP | bnfw |
| Drop Shadow Boxes | drop-shadow-boxes |
| Easing Slider | easing-slider |
| Easy Forms for Mailchimp | yikes-inc-easy-mailchimp-extender |
| Essential Addons for Elementor Pro | essential-addons-elementor |
| File Away | file-away |
| Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty | chaty |
| Jazz Popups | jazz-popups |
| MStore API | mstore-api |
| Multiple Page Generator Plugin – MPG | multiple-pages-generator-by-porthas |
| OTP Login Woocommerce & Gravity Forms | mobile-login-woocommerce |
| Performance Lab | performance-lab |
| Photo Gallery by Ays – Responsive Image Gallery | gallery-photo-gallery |
| PixelYourSite Pro – Your smart PIXEL (TAG) Manager | pixelyoursite-pro |
| PixelYourSite – Your smart PIXEL (TAG) Manager | pixelyoursite |
| Predictive Search | predictive-search |
| Predictive Search for WooCommerce | woocommerce-predictive-search |
| Quiz Maker | quiz-maker |
| RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | custom-registration-form-builder-with-submission-manager |
| Ricerca – advanced search | ricerca-smart-search |
| SEO Change Monitor – Track Website Changes | seo-change-monitor |
| Scripts n Styles | scripts-n-styles |
| Simple Page Ordering | simple-page-ordering |
| Smart App Banner | smart-app-banner |
| Stop Referrer Spam | stop-referrer-spam |
| Stop Spammers Security | Block Spam Users, Comments, Forms | stop-spammer-registrations-plugin |
| Survey Maker – Best WordPress Survey Plugin | survey-maker |
| Ultimate Dashboard – Custom WordPress Dashboard | ultimate-dashboard |
| UpdraftPlus WordPress Backup Plugin | updraftplus |
| Video Gallery | video-slider-with-thumbnails |
| WP Activity Log | wp-security-audit-log |
| WP Activity Log Premium | wp-security-audit-log-premium |
| WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, GravityForms, etc | wp-sms |
| WP htaccess Control | wp-htaccess-control |
| Waiting: One-click countdowns | waiting |
| WeSecur Security – Antivirus, Malware Scanner and Protection for your WordPress | wesecur-security |
| WishSuite – Wishlist for WooCommerce | wishsuite |
| WooCommerce Bookings | woocommerce-bookings |
| WooCommerce Brands | woocommerce-brands |
| WooCommerce Composite Products | woocommerce-composite-products |
| WooCommerce Pre-Orders | woocommerce-pre-orders |
| WooCommerce Product Add-ons | woocommerce-product-addons |
| WooCommerce Ship to Multiple Addresses | woocommerce-shipping-multiple-addresses |
| WooDiscuz – WooCommerce Comments | woodiscuz-woocommerce-comments |
| WordPress | wordpress |
| WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg | groundhogg |
| Zotpress | zotpress |
| nuajik | nuajik-cdn |
| reCAPTCHA and Cloudflare Turnstile For All Pages, to Block Spam and Hackers Attack, Block Visitors from China | recaptcha-for-all |
| video carousel slider with lightbox | wp-responsive-video-gallery-with-lightbox |
| woocommerce-product-recommendations | woocommerce-product-recommendations |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
| Appzend | appzend |
| BuzzStore | buzzstore |
| Craft Blog | craft-blog |
| Fitness Park | fitness-park |
| Kathmag | kathmag |
| Kingcabs | kingcabs |
| Medical Heed | medical-heed |
| MetroStore | metrostore |
| Online eStore | online-estore |
| SparkleStore | sparklestore |
| SpiderMag | spidermag |
