CVE-2021-24724

概要

参考情報

• plugins.trac.wordpress.org/changeset/2573479 · Third Party Advisory
• wpscan.com/vulnerability/c1194a1e-bf33-4f3f-a4a6-27b76b1b1eeb · Exploit
• trustwave.com/en-us/resources/security-resources/security-advisories · Exploit

timetable and event schedule のその他の脆弱性

• CVE-2020-36840緊急 9.8The Timetable and Event Schedule by MotoPress plugin for WordPress is vulnerable to authorization bypass due to a missing capability check o…
• CVE-2022-2844中 6.1A vulnerability classified as problematic has been found in MotoPress Timetable and Event Schedule up to 1.4.06. This affects an unknown par…
• CVE-2021-24585中 6.5The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address (along other less sen…
• CVE-2021-24584中 5.4The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when updating a timeslot, allowing any us…
• CVE-2021-24583中 4.3The Timetable and Event Schedule WordPress plugin before 2.4.2 does not have proper access control when deleting a timeslot, allowing any us…