CVE-2022-0142

概要

参考情報

• wpscan.com/vulnerability/03210390-2054-40c0-9508-39d168087878 · Exploit
• fortiguard.com/zeroday/FG-VD-21-080

visual form builder のその他の脆弱性

• CVE-2022-1046中 4.8The Visual Form Builder WordPress plugin before 3.0.7 does not sanitise and escape the form's 'Email to' field , which could allow high priv…
• CVE-2022-0141高 8.1The Visual Form Builder WordPress plugin before 3.0.8 does not enforce nonce checks which could allow attackers to make a logged in admin or…
• CVE-2022-0140中 5.3The Visual Form Builder WordPress plugin before 3.0.6 does not perform access control on entry form export, allowing unauthenticated users t…
• CVE-2021-24514中 4.8The Visual Form Builder WordPress plugin before 3.0.4 does not sanitise or escape its Form Name, allowing high privilege users such as admin…