CVE-2015-4018

概要

参考情報

• packetstormsecurity.com/files/131974/WordPress-FeedWordPress-2015.0426-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2015/May/75 · Exploit
• wordpress.org/plugins/feedwordpress/changelog · Patch
• exploit-db.com/exploits/37067 · Exploit

feedwordpress のその他の脆弱性

• CVE-2024-0839中 5.3The FeedWordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2022.0222 due…
• CVE-2021-25055中 6.1The FeedWordPress plugin before 2022.0123 is affected by a Reflected Cross-Site Scripting (XSS) within the "visibility" parameter.
• CVE-2015-9358中 6.1The feedwordpress plugin before 2015.0514 for WordPress has XSS via add_query_arg() and remove_query_arg().