CVE-2021-34620

概要

参考情報

• plugins.trac.wordpress.org/browser/fluentform/trunk/app/Modules/Acl/Acl.php · Exploit
• wordfence.com/blog/2021/06/cross-site-request-forgery-patched-in-wp-fluent-forms · Exploit

contact form のその他の脆弱性

• CVE-2024-10646中 6.1The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross…
• CVE-2024-9651中 6.1The Fluent Forms WordPress plugin before 5.2.1 does not sanitise and escape some of its settings, which could allow high privilege users su…
• CVE-2024-9528中 4.8The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross…
• CVE-2024-5053中 4.3The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized…
• CVE-2024-6703中 5.4The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to Stored Cross…