CVE-2021-25078

概要

参考情報

• plugins.trac.wordpress.org/changeset/2648196 · Patch
• wpscan.com/vulnerability/d4edb5f2-aa1b-4e2d-abb4-76c46def6c6e · Exploit

affiliates manager のその他の脆弱性

• CVE-2024-0859中 4.3The Affiliates Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.9.34. This i…
• CVE-2023-52148中 5.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects…
• CVE-2023-52130高 8.8Cross-Site Request Forgery (CSRF) vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager.This issue affects Affiliates Manager: from…
• CVE-2023-28986高 8.8Cross-Site Request Forgery (CSRF) vulnerability in wp.Insider, wpaffiliatemgr Affiliates Manager plugin <= 2.9.20 versions.
• CVE-2022-2799中 4.8The Affiliates Manager WordPress plugin before 2.9.14 does not sanitise and escape some of its settings, which could allow high privilege us…