La semaine dernière, 58 vulnérabilités ont été divulguées dans 43 plugins WordPress et 3 thèmes WordPress qui ont été ajoutés à la base de données des vulnérabilités de Wordfence Intelligence par l’équipe de renseignement sur les menaces de Wordfence.
L’équipe a également déployé 1 nouvelle règle de pare-feu qui fournit aux clients de Wordfence Premium, Care et Response une protection renforcée contre les vulnérabilités. Les utilisateurs de Wordfence gratuit recevront cette protection après un délai de 30 jours.
P.S. Si vous utilisez le plugin Wordfence sur votre site WordPress, avec le scanner activé, vous devriez déjà avoir été notifié si votre site était affecté par l’une de ces vulnérabilités.
Au Farweb, nous avons bien mis à jour les plugins et les thèmes concernés afin que ceux-ci ne soient plus un risque pour votre site Internet.
La mission du plugin de sécurité Wordfence Intelligence est de rendre des informations sur les vulnérabilités facilement accessibles à tous. Cette article a été traduit directement depuis leur newsletter.
Total Unpatched & Patched Vulnerabilities Last Week
| Patch Status | Number of Vulnerabilities |
| Unpatched | 14 |
| Patched | 44 |
WordPress Plugins with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
| Add to Feedly | add-to-feedly |
| Advanced Custom Fields (ACF) | advanced-custom-fields |
| Advanced Custom Fields Pro | advanced-custom-fields-pro |
| Advanced Woo Search | advanced-woo-search |
| Albo Pretorio On line | albo-pretorio-on-line |
| AnyWhere Elementor | anywhere-elementor |
| CM Pop-Up banners for WordPress | cm-pop-up-banners |
| Community by PeepSo – Social Network, Membership, Registration, User Profiles | peepso-core |
| Contact Form 7 extension for Google Map fields | cf7-google-map |
| Cryptocurrency Payment & Donation Box – Accept Payments in any Cryptocurrency on your WP Site for Free | cryptocurrency-donation-box |
| Custom 404 Pro | custom-404-pro |
| DX Delete Attached Media | dx-delete-attached-media |
| Easy Appointments | easy-appointments |
| Easy Digital Downloads – Simple eCommerce for Selling Digital Files | easy-digital-downloads |
| FV Flowplayer Video Player | fv-wordpress-flowplayer |
| Fast & Effective Popups & Lead-Generation for WordPress – HollerBox | holler-box |
| Hostel | hostel |
| Image Optimizer by 10web – Image Optimizer and Compression plugin | image-optimizer-wd |
| Library Viewer | library-viewer |
| Login rebuilder | login-rebuilder |
| Loginizer | loginizer |
| Manager for Icomoon | manager-for-icomoon |
| Metform Elementor Contact Form Builder – Flexible and Design-Friendly Contact Form builder plugin for WordPress | metform |
| Multi Rating | multi-rating |
| Newsletter Popup | newsletter-popup |
| OSM – OpenStreetMap | osm |
| Otter – Gutenberg Blocks – Page Builder for Gutenberg Editor & FSE | otter-blocks |
| Participants Database | participants-database |
| Photo Gallery by Ays – Responsive Image Gallery | gallery-photo-gallery |
| Product Addons & Fields for WooCommerce | woocommerce-product-addon |
| Spiffy Calendar | spiffy-calendar |
| TK Google Fonts GDPR Compliant | tk-google-fonts |
| TP Education | tp-education |
| UserAgent-Spy | useragent-spy |
| WOLF – WordPress Posts Bulk Editor and Manager Professional | bulk-editor |
| WP Directory Kit | wpdirectorykit |
| WP Docs | wp-docs |
| WP EasyPay – Square for WordPress | wp-easy-pay |
| WP Fastest Cache | wp-fastest-cache |
| WP Job Portal – A Complete Job Board | wp-job-portal |
| WP-FormAssembly | formassembly-web-forms |
| WPO365 | Mail Integration for Office 365 / Outlook | mail-integration-365 |
| WPPizza – A Restaurant Plugin | wppizza |
WordPress Themes with Reported Vulnerabilities Last Week
| Software Name | Software Slug |
| Editorialmag | editorialmag |
| JupiterX | jupiterx |
| TheGem | thegem |
