CVE-2016-10895

概要

参考情報

• wordpress.org/plugins/option-tree · Release Notes

optiontree のその他の脆弱性

• CVE-2019-15321緊急 9.8The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled.
• CVE-2019-15320緊急 9.8The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled.
• CVE-2019-15319緊急 9.8The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce.
• CVE-2015-9320中 6.1The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.