CVE-2021-24231

概要

参考情報

• jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin · Exploit
• wpscan.com/vulnerability/f8ab6855-a319-47ac-82fb-58b181e77500 · Third Party Advisory

patreon wordpress のその他の脆弱性

• CVE-2023-41129高 8.8Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress.This issue affects Patreon WordPress: from n/a through 1.8.6.
• CVE-2021-25026中 5.5The Patreon WordPress plugin before 1.8.2 does not sanitise and escape the field "Custom Patreon Page name", which could allow high privileg…
• CVE-2021-24230高 8.1The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers…
• CVE-2021-24229緊急 9.6The Jetpack Scan team identified a Reflected Cross-Site Scripting via the patreon_save_attachment_patreon_level AJAX action of the Patreon W…
• CVE-2021-24228緊急 9.6The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the Patreon WordPress plugin before 1.7.2. The WordPr…