CVE-2022-0140

概要

参考情報

• wpscan.com/vulnerability/9fa2b3b6-2fe3-40f0-8f71-371dd58fe336 · Exploit
• fortiguard.com/zeroday/FG-VD-21-082 · Third Party Advisory

visual form builder のその他の脆弱性

• CVE-2022-1046中 4.8The Visual Form Builder WordPress plugin before 3.0.7 does not sanitise and escape the form's 'Email to' field , which could allow high priv…
• CVE-2022-0142緊急 9.8The Visual Form Builder WordPress plugin before 3.0.8 is vulnerable to CSV injection allowing a user with low level or no privileges to inje…
• CVE-2022-0141高 8.1The Visual Form Builder WordPress plugin before 3.0.8 does not enforce nonce checks which could allow attackers to make a logged in admin or…
• CVE-2021-24514中 4.8The Visual Form Builder WordPress plugin before 3.0.4 does not sanitise or escape its Form Name, allowing high privilege users such as admin…