CVE-2018-1002007

概要

参考情報

• vapidlabs.com/advisory.php · Exploit
• wordpress.org/plugins/bft-autoresponder · Product
• exploit-db.com/exploits/45434 · Exploit

arigato autoresponder and newsletter のその他の脆弱性

• CVE-2023-47686高 8.8Cross-Site Request Forgery (CSRF) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.2.2 versions.
• CVE-2023-25031中 4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1 versions.
• CVE-2023-25020中 6.1Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 versions.
• CVE-2023-25061中 5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin <= 2.7.1.1 v…
• CVE-2023-0543中 4.8The Arigato Autoresponder and Newsletter WordPress plugin before 2.1.7.2 does not sanitize and escape some of its settings, which could allo…