CVE-2020-24147

概要

参考情報

• secwx/research · Third Party Advisory
• wordpress.org/plugins/wp-smart-import · Vendor Advisory

wp smart import のその他の脆弱性

• CVE-2025-47453緊急 9.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Xylus Themes WP Sma…
• CVE-2024-32597中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows…
• CVE-2024-30201中 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xylus Themes WordPress Importer allows…
• CVE-2022-40209中 6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Xylus Themes WP Smart Import plugin <= 1.0.2 on WordPress.