CVE-2014-6604

概要

参考情報

• barmat.io/blog/2014/10/01/stored-xss-vulnerability-in-the-wordpress-plugin-subscribe2 · Exploit
• plugins.trac.wordpress.org/changeset/993564/subscribe2 · Release Notes

subscribe2 のその他の脆弱性

• CVE-2023-3407中 4.3The Subscribe2 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.40. This is due to miss…
• CVE-2023-1844中 4.3The Subscribe2 plugin for WordPress is vulnerable to unauthorized access to email functionality due to a missing capability check when sendi…
• CVE-2022-4309低 3.1The Subscribe2 WordPress plugin before 10.38 does not have CSRF check when deleting users, which could allow attackers to make a logged in a…