CVE-2019-14948

概要

参考情報

• wordpress.org/plugins/woocommerce-product-addon · Release Notes
• wpvulndb.com/vulnerabilities/9502 · Third Party Advisory
• pluginvulnerabilities.com/2019/08/08/this-authenticated-persistent-xss-vulnerability-might-be-what-hackers-are-targeting-ppom-for-woocommerce-for · Exploit

ppom for woocommerce のその他の脆弱性

• CVE-2021-25018中 5.4The PPOM for WooCommerce WordPress plugin before 24.0 does not have authorisation and CSRF checks in the ppom_settings_panel_action AJAX act…