CVE-2021-3135

概要

参考情報

• tagdiv.com/newspaper · Release Notes
• themeforest.net/item/newspaper/5489609 · Third Party Advisory

newspaper のその他の脆弱性

• CVE-2024-3815中 4.8The Newspaper theme for WordPress is vulnerable to Stored Cross-Site Scripting via attachment meta in the archive page in all versions up to…
• CVE-2022-2627中 6.1The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, lea…
• CVE-2022-2167中 6.1The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, lea…
• CVE-2016-10972緊急 9.8The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.
• CVE-2017-18634緊急 9.8The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php.