CVE-2021-39341

概要

参考情報

• plugins.trac.wordpress.org/browser/optinmonster/trunk/OMAPI/RestApi.php · Third Party Advisory
• wordfence.com/vulnerability-advisories · Third Party Advisory
• wordfence.com/blog/2021/10/1000000-sites-affected-by-optinmonster-vulnerabilities · Exploit

optinmonster のその他の脆弱性

• CVE-2024-4045中 5.4The Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation plugin for WordPress is vulnerable to…
• CVE-2023-0772中 6.5The Popup Builder by OptinMonster WordPress plugin before 2.12.2 does not ensure that the campaign to be loaded via some shortcodes is actua…
• CVE-2021-39325中 6.1The OptinMonster WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient input validation in the load_previews …
• CVE-2016-10996中 5.3The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak.