CVE-2019-17669

概要

参考情報

• blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html · Third Party Advisory
• core.trac.wordpress.org/changeset/46475 · Vendor Advisory
• WordPress/WordPress commit 608d39f · Patch
• lists.debian.org/debian-lts-announce/2019/11/msg00000.html · Mailing List
• seclists.org/bugtraq/2020/Jan/8 · Mailing List
• wordpress.org/news/2019/10/wordpress-5-2-4-security-release · Release Notes
• wpvulndb.com/vulnerabilities/9912 · Third Party Advisory
• debian.org/security/2020/dsa-4599 · Third Party Advisory
• debian.org/security/2020/dsa-4677 · Third Party Advisory

wordpress のその他の脆弱性

• CVE-2026-87902高 8.1悪用確認済み（CISA KEV）An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the …
• CVE-2026-63030緊急 9.8悪用確認済み（CISA KEV）WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the …
• CVE-2026-60137中 5.9悪用確認済み（CISA KEV）WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query…
• CVE-2022-4973中 5.4WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with acce…
• CVE-2024-4439中 6.1WordPress Core is vulnerable to Stored Cross-Site Scripting via user display names in the Avatar block in various versions up to 6.5.2 due t…