CVE-2021-24370

概要

参考情報

• lists.openwall.net/full-disclosure/2020/11/17/2 · Exploit
• seclists.org/fulldisclosure/2020/Nov/30 · Exploit
• wpscan.com/vulnerability/82c52461-1fdc-41e4-9f51-f9dd84962b38 · Exploit
• secpod.com/blog/critical-zero-day-flaw-actively-exploited-in-wordpress-fancy-product-designer-plugin · Exploit
• wordfence.com/blog/2021/06/critical-0-day-in-fancy-product-designer-under-active-attack · Exploit

fancy product designer のその他の脆弱性

• CVE-2024-0904中 5.9The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could allow high privileg…
• CVE-2024-0905中 6.3The Fancy Product Designer WordPress plugin before 6.1.8 does not sanitise and escape a parameter before outputting it back in the page, lea…
• CVE-2024-0902中 4.8The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could allow high privileg…
• CVE-2024-0365中 6.5The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before using it in a SQL statemen…
• CVE-2021-4334高 8.8The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized modification of site options due to a missing capability check…