분류되지 않음
脆弱性情報
重大性
7.2
WordPress脆弱性情報
WordPressのコア・テーマ・プラグインの
脆弱性情報を配信しています
"キーワード指定なし"
분류되지 않음 분류되지 않음
脆弱性情報
重大性
7.3
【plugin】『AADMY – Add Auto Date Month Year Into Posts』(versions 2.0.1 以下) Unauthenticated Arbitrary Shortcode Executionの脆弱性
분류되지 않음
脆弱性情報
重大性
5.3
【plugin】『WPIDE – File Manager & Code Editor』(versions 3.4.9 以下) Unauthenticated Full Path Dislcosureの脆弱性
분류되지 않음
脆弱性情報
重大性
5.3
【plugin】『WooCommerce』(versions 9.0.2 以下) Unauthenticated HTML Injectionの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Smart Online Order for Clover』(versions 1.5.7 以下) Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcodeの脆弱性
분류되지 않음
脆弱性情報
重大性
4.3
【plugin】『Elementor Website Builder – More than Just a Page Builder』(versions 3.24.5 以下) Authenticated (Contributor+) Basic Information Exposure via get_image_alt Functionの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『TablePress – Tables in WordPress made easy』(versions 2.4.2 以下) Authenticated (Author+) Stored Cross-Site Scriptingの脆弱性
분류되지 않음
脆弱性情報
重大性
6.1
【plugin】『2D Tag Cloud』(versions 6.0.2 以下) Reflected Cross-Site Scripting via add_query_arg Parameterの脆弱性
분류되지 않음
脆弱性情報
重大性
7.2
【plugin】『WP Post Author – Boost Your Blog's Engagement with Author Box, Social Links, Co-Authors, Guest Authors, Post Rating System, and Custom User Registration Form Builder』(versions 3.8.1 以下) Authenticated (Administrator+) SQL Injectionの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Mynx Page Builder』(versions 0.27.8 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
4.4
【plugin】『ImagePress – Image Gallery』(versions 1.2.2 以下) Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settingsの脆弱性
분류되지 않음
脆弱性情報
重大性
5.3
【plugin】『Stackable – Page Builder Gutenberg Blocks』(versions 3.13.6 以下) Unauthenticated CSS Injectionの脆弱性
분류되지 않음
脆弱性情報
重大性
4.3
【plugin】『Read more By Adam』(versions 1.1.8 以下) Missing Authorization to Authenticated (Subscriber+) Read More Button Deletionの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Category Icon』(versions 1.0.0 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
4.3
【plugin】『Order Attachments for WooCommerce』(versions 2.0 – 2.4.1) Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『WP Ultimate Post Grid』(versions 3.9.3 以下) Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-grid-with-filters Shortcodeの脆弱性
분류되지 않음
脆弱性情報
重大性
4.9
【plugin】『Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder』(versions 2.15.2 以下) Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Readの脆弱性
분류되지 않음
脆弱性情報
重大性
6.1
【plugin】『BlockMeister – Block Pattern Builder』(versions 3.1.10 以下) Reflected Cross-Site Scriptingの脆弱性
분류되지 않음
脆弱性情報
重大性
6.5
【plugin】『WordPress Comments Import & Export』(versions 2.3.7 以下) Authenticated (Author+) Arbitrary File Read via Directory Traversalの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Advanced Blocks Pro』(versions 1.0.0 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
6.1
【plugin】『Easy Social Share Buttons』(versions 1.4.5 以下) Reflected Cross-Site Scriptingの脆弱性
분류되지 않음
脆弱性情報
重大性
4.3
【plugin】『Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress』(versions 1.3.0 以下) Missing Authorization to Arbitrary (Subscriber+) Attachment Deletionの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Curator.io: Show all your social media posts in a beautiful feed.』(versions 1.9 以下) Authenticated (Contributor+) Stored Cross-Site Scripting via feed_id Attributeの脆弱性
분류되지 않음
脆弱性情報
重大性
7.3
【plugin】『Shortcodes AnyWhere』(versions 1.0.1 以下) Unauthenticated Arbitrary Shortcode Executionの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Elementor Inline SVG』(versions 1.2.0 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
5.3
【plugin】『WP Helper Premium』(versions 4.6.1 以下) Missing Authorization in whp_smtp_send_mail_testの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Marketing and SEO Booster』(versions 1.9.10 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
6.1
【plugin】『Maximum Products per User for WooCommerce』(versions 4.2.8 以下) Reflected Cross-Site Scriptingの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress』(versions 1.3.0 以下) Authenticated (Contributor+) Stored Cross-Site Scripting via youzify_media Shortcodeの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『GDPR-Extensions-com – Consent Manager』(versions 1.0.0 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『WP Builder』(versions 3.0.7 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Embed PDF Viewer』(versions 2.4.4 以下) Authenticated (Contributor+) Stored Cross-Site Scripting via height and width Parametersの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Auto iFrame』(versions 1.7 以下) Authenticated (Author+) Stored Cross-Site Scripting via tag Parameterの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Image Optimizer, Resizer and CDN – Sirv』(versions 7.2.9 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
6.1
【plugin】『Themify Builder』(versions 7.6.2 以下) Reflected Cross-Site Scriptingの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『WP Cleanup and Basic Functions』(versions 2.2.1 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
6.1
【plugin】『Quantity Dynamic Pricing & Bulk Discounts for WooCommerce』(versions 3.8.0 以下) Reflected Cross-Site Scriptingの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Display Medium Posts』(versions 5.0.1 以下) Authenticated (Contributor+) Stored Cross-Site Scripting via display_medium_posts Shortcodeの脆弱性
분류되지 않음
脆弱性情報
重大性
6.1
【plugin】『WordPress Captcha Plugin by Captcha Bank』(versions 4.0.36 以下) Reflected Cross-Site Scriptingの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Re:WP』(versions 1.0.1 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Login Logout Shortcode』(versions 1.1.0 以下) Authenticated (Contributor+) Stored Cross-Site Scripting via class Parameterの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Aggregator Advanced Settings』(versions 1.2.1 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『WP Blocks Hub』(versions 1.0.2 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Easy Demo Importer – A Modern One-Click Demo Import Solution』(versions 1.1.2 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
6.1
【plugin】『Clio Grow』(versions 1.0.2 以下) Reflected Cross-Site Scriptingの脆弱性
분류되지 않음
脆弱性情報
重大性
6.1
【plugin】『Product Delivery Date for WooCommerce – Lite』(versions 2.7.3 以下) Reflected Cross-Site Scriptingの脆弱性
분류되지 않음
脆弱性情報
重大性
7.5
【plugin】『Social Web Suite – Social Media Auto Post, Social Media Auto Publish』(versions 4.1.11 以下) Directory Traversal to Arbitrary File Downloadの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『WordPress Infinite Scroll – Ajax Load More』(versions 7.1.2 以下) Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameterの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
【plugin】『Demo Importer Plus』(versions 2.0.1 以下) Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadの脆弱性
분류되지 않음
脆弱性情報
重大性
6.4
