CVE-2020-24948

概要

参考情報

• packetstormsecurity.com/files/160850/WordPress-Autoptimize-Shell-Upload.html · Exploit
• wpvulndb.com/vulnerabilities/10372 · Exploit

autoptimize のその他の脆弱性

• CVE-2023-2113中 4.8The Autoptimize WordPress plugin before 3.1.7 does not sanitise and escape the settings imported from a previous export, allowing high privi…
• CVE-2022-2635中 4.8The Autoptimize WordPress plugin before 3.1.1 does not sanitise and escape some of its settings, which could allow high privilege users such…
• CVE-2021-24378中 4.8The Autoptimize WordPress plugin before 2.7.8 does not check for malicious files such as .html in the archive uploaded via the 'Import Setti…
• CVE-2021-24377高 8.1The Autoptimize WordPress plugin before 2.7.8 attempts to remove potential malicious files from the extracted archive uploaded via the 'Impo…
• CVE-2021-24376緊急 9.8The Autoptimize WordPress plugin before 2.7.8 attempts to delete malicious files (such as .php) form the uploaded archive via the "Import Se…