CVE-2020-35946

概要

参考情報

• wpscan.com/vulnerability/10320 · Exploit
• wordfence.com/blog/2020/07/2-million-users-affected-by-vulnerability-in-all-in-one-seo-pack · Exploit

all in one seo pack のその他の脆弱性

• CVE-2013-5988中 6.1A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter.
• CVE-2019-16520中 5.4The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of…