CVE-2014-7181

概要

参考情報

• packetstormsecurity.com/files/128693/WordPress-MaxButtons-1.26.0-Cross-Site-Scripting.html · Exploit
• securityfocus.com/archive/1/533700/100/0/threaded
• wordpress.org/plugins/maxbuttons/changelog · Vendor Advisory
• htbridge.com/advisory/HTB23237

maxbuttons のその他の脆弱性

• CVE-2024-8968中 4.7The WordPress Button Plugin MaxButtons WordPress plugin before 9.8.1 does not sanitise and escape some of its settings, which could allow hi…
• CVE-2024-10555中 4.8The WordPress Button Plugin MaxButtons WordPress plugin before 9.8.1 does not sanitise and escape some of its settings, which could allow hi…
• CVE-2024-6499中 5.3The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 9.7.…
• CVE-2024-3026中 5.4The WordPress Button Plugin MaxButtons WordPress plugin before 9.7.8 does not sanitise and escape some parameters, which could allow users w…
• CVE-2023-7029中 5.4The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in al…