CVE-2015-9467

概要

参考情報

• cinu.pl/research/wp-plugins/mail_604dd4c86dca013f6e5e89751352f36d.html · Exploit
• wordpress.org/plugins/broken-link-manager · Release Notes
• wpvulndb.com/vulnerabilities/8320 · Third Party Advisory

broken link manager のその他の脆弱性

• CVE-2015-9468中 6.1The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.
• CVE-2015-9453中 6.1The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist.