CVE-2019-15647

概要

参考情報

• wordpress.org/plugins/groundhogg · Release Notes
• wpvulndb.com/vulnerabilities/9834 · Third Party Advisory
• pluginvulnerabilities.com/2019/04/05/our-proactive-monitoring-caught-an-authenticated-remote-code-execution-rce-vulnerability-being-introduced-in-to-groundhogg · Exploit

groundhogg のその他の脆弱性

• CVE-2024-37235中 4.3Cross-Site Request Forgery (CSRF) vulnerability in Adrian Tobey Groundhogg groundhogg allows Cross Site Request Forgery.This issue affects G…
• CVE-2024-37264中 6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Groundhogg Inc. Groundhogg allo…
• CVE-2023-34178高 8.8Cross-Site Request Forgery (CSRF) vulnerability in Groundhogg Inc. Groundhogg plugin <= 2.7.11 versions.
• CVE-2023-34179高 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Inc. Groundhogg allows SQL …
• CVE-2023-40681中 4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Groundhogg Inc. Groundhogg plugin <= 2.7.11.10 versions.