CVE-2022-0189

概要

参考情報

• plugins.trac.wordpress.org/changeset/2659298 · Release Notes
• wpscan.com/vulnerability/52a71bf1-b8bc-479e-b741-eb8fb9685014 · Exploit

wp rss aggregator のその他の脆弱性

• CVE-2024-0628低 3.8The WP RSS Aggregator plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.23.5 via the…
• CVE-2024-0630中 4.8The WP RSS Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the RSS feed source in all versions up to, and i…
• CVE-2021-24988中 5.4The WP RSS Aggregator WordPress plugin before 4.19.3 does not sanitise and escape data before outputting it in the System Info admin dashboa…
• CVE-2021-24768中 4.8The WP RSS Aggregator WordPress plugin before 4.19.2 does not properly sanitise and escape the URL to Blacklist field, allowing malicious HT…