CVE-2019-14773

概要

参考情報

• wordpress.org/plugins/insert-php · Third Party Advisory
• pluginvulnerabilities.com/2019/08/01/post-deletion-vulnerability-in-woody-ad-snippets · Exploit

woody ad snippets のその他の脆弱性

• CVE-2019-16289中 5.4The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows authenticated XSS via the winp_item parameter.
• CVE-2019-15858高 8.8admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, …