CVE-2021-24332

概要

参考情報

• m0ze.ru/vulnerability/%5B2021-04-01%5D-%5BWordPress%5D-%5BCWE-79%5D-Autoptimize-WordPress-Plugin-v2.8.3.txt
• wpscan.com/vulnerability/6678e064-ce21-4bb2-8c50-061073fb22fb · Exploit

autoptimize のその他の脆弱性

• CVE-2023-2113中 4.8The Autoptimize WordPress plugin before 3.1.7 does not sanitise and escape the settings imported from a previous export, allowing high privi…
• CVE-2022-2635中 4.8The Autoptimize WordPress plugin before 3.1.1 does not sanitise and escape some of its settings, which could allow high privilege users such…
• CVE-2021-24378中 4.8The Autoptimize WordPress plugin before 2.7.8 does not check for malicious files such as .html in the archive uploaded via the 'Import Setti…
• CVE-2021-24377高 8.1The Autoptimize WordPress plugin before 2.7.8 attempts to remove potential malicious files from the extracted archive uploaded via the 'Impo…
• CVE-2021-24376緊急 9.8The Autoptimize WordPress plugin before 2.7.8 attempts to delete malicious files (such as .php) form the uploaded archive via the "Import Se…