| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| activello | < 1.4.2 | 1.4.2 |
| bonkers | < 1.0.6 | 1.0.6 |
| illdy | < 2.1.7 | 2.1.7 |
| newspaper x | < 1.3.2 | 1.3.2 |
| pixova lite | < 2.0.7 | 2.0.7 |
| shapely | < 1.2.9 | 1.2.9 |
| affluent | < 1.1.2 | 1.1.2 |
| allegiant | < 1.2.6 | 1.2.6 |
| brilliance | < 1.3.0 | 1.3.0 |
| transcend | < 1.2.0 | 1.2.0 |
| antreas | < 1.0.7 | 1.0.7 |
| medzone lite | < 1.2.6 | 1.2.6 |
| naturemag lite | ≤ 1.0.4 | |
| newsmag | < 2.4.2 | 2.4.2 |
| regina lite | < 2.0.6 | 2.0.6 |
The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the 'activello_activate_plugin' and 'activello_deactivate_plugin' functions in the 'inc/welcome-screen/class-activello-welcome.php' file missing capability and security checks/nonces. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン