CVE-2021-36895

概要

参考情報

• patchstack.com/database/vulnerability/tripetto/wordpress-tripetto-plugin-5-1-4-unauthenticated-cross-site-scripting-xss-vulnerability-via-svg-image-upload · Release Notes
• wordpress.org/plugins/tripetto · Release Notes

tripetto のその他の脆弱性

• CVE-2025-1530中 4.3The Tripetto plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.0.9. This is due to mi…
• CVE-2024-13497中 6.1The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable to Stored Cross-Site …
• CVE-2024-10260中 6.1The Tripetto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File uploads in all versions up to, and including, 8.0.11…