CVE-2018-10234

概要

参考情報

• RiieCco/write-ups · Exploit
• wordpress.org/plugins/ultimate-member · Third Party Advisory

user profile & membership のその他の脆弱性

• CVE-2018-0590中 4.3Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to modify the…
• CVE-2018-0589中 4.3Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated attackers to bypass access restriction to add a new …
• CVE-2018-0588高 7.5Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote attacker…
• CVE-2018-0587中 4.3Unrestricted file upload vulnerability in Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote authenticated users to u…
• CVE-2018-0586中 4.3Directory traversal vulnerability in the shortcodes function of Ultimate Member plugin prior to version 2.0.4 for WordPress allows remote au…