CVE-2021-36917

概要

参考情報

• codecanyon.net/item/hide-my-wp-amazing-security-plugin-for-wordpress/4177158 · Product
• patchstack.com/database/vulnerability/hide-my-wp/wordpress-hide-my-wp-premium-plugin-6-2-3-unauthenticated-plugin-deactivation-vulnerability · Third Party Advisory
• patchstack.com/hide-my-wp-vulnerabilities-fixed · Exploit

hide my wp のその他の脆弱性

• CVE-2022-4681緊急 9.8The Hide My WP WordPress plugin before 6.2.9 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJA…
• CVE-2021-36916緊急 9.8The SQL injection vulnerability in the Hide My WP WordPress plugin (versions <= 6.2.3) is possible because of how the IP address is retrieve…