脆弱性情報
脆弱性情報
WordPress Rich Reviews by Starfish plugin” (versions <= 1.9.14) Cross Site Request Forgery (CSRF) vulnerability
脆弱性情報
WordPress Enable SVG, WebP & ICO Upload plugin” (versions<= 1.0.1) authenticated stored-address cross-site scripting (XSS) vulnerability
脆弱性情報
WordPress Simple SEO plugin” (versions <= 1.7.91) authenticated stored-address cross-site scripting (XSS) vulnerability
脆弱性情報
WordPress Team plugin” (versions <= 4.1.1) authenticated arbitrary file read and delete vulnerability
脆弱性情報
Authenticated stored-address cross-site scripting (XSS) vulnerability in “WordPress Floating Div plugin” (versions <= 3.0)
脆弱性情報
Vulnerability in “WordPress WPGraphQL WooCommerce plugin” (versions <= 0.11.0) disclosing unauthenticated coupon codes
脆弱性情報
‘WordPress Duplicate Page and Post plugin’ (versions <= 2.7) Authenticated Saved Cross-Site Scripting (XSS) Vulnerability
脆弱性情報
WordPress Team plugin” (versions <= 1.2.6) Multiple AuthenticatedStoredCross-Site Scripting (XSS) vulnerabilities
脆弱性情報
WordPress Team plugin” (versions <= 1.2.6) Multiple AuthenticatedPersistentCross-Site Scripting (XSS) vulnerabilities
脆弱性情報
Vulnerability in “WordPress Homepage Product Organizer for WooCommerce plugin” (versions <= 1.1)
脆弱性情報
WordPress WP-UserOnline plugin” (versions <= 2.87.6) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability
脆弱性情報
WordPress Elementor Contact Form DB” (versions <= 1.7) Reflective Cross Site Scripting (XSS) Vulnerability
脆弱性情報
Vulnerability in “WordPress Testimonials plugin” (versions <= 3.0.1)
脆弱性情報
The “WordPress Easy Student Results plugin” (versions <= 2.2.8) Reflected cross-site scripting (XSS) vulnerability
脆弱性情報
WordPress E Unlocked – Student Result plugin” (versions <= 1.0.4) Arbitrary file upload via Cross Site Request Forgery (CSRF) vulnerability
脆弱性情報
‘WordPress Feed Them Social plugin’ (versions <= 2.9.8.5) unauthenticated PHAR reverse serialization vulnerability
脆弱性情報
Disclosure of sensitive information due to a vulnerability in the “WordPress Easy Student Results plugin” (versions <= 2.2.8) RESTAPI
脆弱性情報
WordPress mTouch Quiz plugin” (versions <= 3.1.3) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability
脆弱性情報
WordPress YaySMTP plugin” (versions <= 2.2) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability
脆弱性情報
WordPress Thinkific Uploader plugin” (versions <= 1.0.0) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability
脆弱性情報
WordPress Website File Changes Monitor plugin” (versions <= 1.8.2) AuthenticatedSQL Injection (SQLi) vulnerability
脆弱性情報
Authentication bypass vulnerability in “WordPress WP OAuth2 Server plugin” (versions <= 1.0.1)
脆弱性情報
‘WordPress YaySMTP – Simple WP SMTP Mail plugin’ (versions <= 2.2.1) authenticated stored cross-site scripting (XSS) vulnerability
脆弱性情報
WordPress WP Comments Fields plugin” (versions <= 4.0) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability
脆弱性情報
WordPress weForms plugin” (versions <= 1.6.13) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability
脆弱性情報
‘WordPress Import CSV Files plugin’ (versions <= 1.0) Reflected cross-site scripting (XSS) vulnerability
脆弱性情報
WordPress WSM Downloader plugin” (versions <= 1.4.0) domain name restriction bypass vulnerability
脆弱性情報
WordPress User Private Files plugin” (versions <= 1.1.2) Authenticated arbitrary file upload vulnerability
脆弱性情報
WordPress Discy premium theme” (versions <= 4.9) Vulnerability Description
脆弱性情報
‘WordPress YaySMTP – Simple WP SMTP Mail plugin’ (versions <= 2.2.1) authenticated stored cross-site scripting (XSS) vulnerability
脆弱性情報
WordPress WP Comments Fields plugin” (versions <= 4.0) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability
脆弱性情報
Vulnerability in “WordPress WSM Downloader plugin” (versions <= 1.4.0)
脆弱性情報
Vulnerability in “WordPress GiveWP plugin” (versions <= 2.20.2) authenticated arbitrary files via export function
脆弱性情報
Creation of authenticated arbitrary files due to a vulnerability in the “WordPress GiveWP plugin” (versions <= 2.20.2) export function
脆弱性情報
DoS via “WordPress GiveWP plugin” (versions <= 2.21.2) Cross Site Request Forgery (CSRF) vulnerability
脆弱性情報
WordPress GiveWP plugin” (versions <= 2.21.2) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability
脆弱性情報
WordPress Featured Image from URL plugin” (versions <= 4.0.0) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability
脆弱性情報
WordPress Featured Image from URL plugin” (versions <= 3.9.9) arbitrary configuration update to XSS via CSRF vulnerability
脆弱性情報
WordPress Youzify plugin” (versions <= 1.1.9) unauthenticated SQL injection (SQLi) vulnerability
脆弱性情報
Local File Include (LFI) via “WordPress CAPTCHA 4WP plugin” (versions <= 7.0.6.1) Cross Site Request Forgery (CSRF) vulnerability
脆弱性情報
WordPress YaySMTP plugin” (versions <= 2.2) authenticated SMTP credentials compromise vulnerability
脆弱性情報
Vulnerability in “WordPress YaySMTP plugin” (versions <= 2.2) authenticated log disclosure
脆弱性情報
WordPress YOP Poll plugin” (versions <= 6.4.2) IP spoofing vulnerability
脆弱性情報
WordPress Project Source Code Download plugin” (versions <= 1.0.0) unauthenticated backup download vulnerability
脆弱性情報
WordPress Event Timeline plugin” (versions <= 1.1.5) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability
脆弱性情報
WordPress Invitation Based Registrations plugin” (versions <= 2.2.84) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability
脆弱性情報
WordPress Simple Membership plugin” (versions <= 4.1.2) membership privilege escalation vulnerability
脆弱性情報
WordPress Simple Membership plugin” (versions <= 4.1.2) unauthenticated membership privilege escalation vulnerability
脆弱性情報