CVE-2021-36861

概要

参考情報

• patchstack.com/database/vulnerability/rich-reviews/wordpress-rich-reviews-by-starfish-plugin-1-9-14-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
• wordpress.org/plugins/rich-reviews · Product

rich review のその他の脆弱性

• CVE-2019-25216中 6.1The Rich Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the POST body 'update' parameter in versions up to, an…
• CVE-2021-24753高 7.2The Rich Reviews by Starfish WordPress plugin before 1.9.6 does not properly validate the orderby GET parameter of the pending reviews page …