CVE-2018-9844

概要

参考情報

• wordpress.org/plugins/wp-file-upload · Third Party Advisory
• exploit-db.com/exploits/44444 · Exploit
• iptanus.com/new-version-4-3-4-of-wordpress-file-upload-plugin · Vendor Advisory

wordpress file upload のその他の脆弱性

• CVE-2024-13494中 4.3The WordPress File Upload plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.25.2. Thi…
• CVE-2024-9939高 7.5The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.13 via wfu_file_do…
• CVE-2024-11635緊急 9.8The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the …
• CVE-2024-11613緊急 9.8The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in a…
• CVE-2024-12719中 4.3The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wfu_aj…