CVE-2019-16289

概要

参考情報

• generaleg0x01.com/2019/09/13/xss-woody · Exploit
• wordpress.org/plugins/insert-php · Release Notes
• wpvulndb.com/vulnerabilities/9880 · Third Party Advisory

woody ad snippets のその他の脆弱性

• CVE-2019-15858高 8.8admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, …
• CVE-2019-14773高 7.5admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action…