CVE-2021-25022

概要

参考情報

• plugins.trac.wordpress.org/changeset/2635585/updraftplus · Patch
• plugins.trac.wordpress.org/changeset/2637112/updraftplus · Patch
• wpscan.com/vulnerability/1801c7ae-2b5c-493f-969d-4bb19a9feb15 · Exploit

updraftplus のその他の脆弱性

• CVE-2023-5982中 5.4The UpdraftPlus: WordPress Backup & Migration Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,…
• CVE-2023-32960中 6.1Cross-Site Request Forgery (CSRF) vulnerability in UpdraftPlus.Com, DavidAnderson UpdraftPlus WordPress Backup Plugin <= 1.23.3 versions lea…
• CVE-2022-0864中 6.1The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval parameter before ou…
• CVE-2022-0633中 6.5The UpdraftPlus WordPress plugin Free before 1.22.3 and Premium before 2.22.3 do not properly validate a user has the required privileges to…
• CVE-2021-25089中 6.1The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.16.69 does not sanitise and escape the updraft_restore parameter before ou…