CVE-2022-0360

概要

参考情報

• plugins.trac.wordpress.org/changeset/2662897 · Release Notes
• wpscan.com/vulnerability/d718b993-4de5-499c-84c9-69801396f51f · Exploit

import all pages, post types, products, orders, and users as xml & csv のその他の脆弱性

• CVE-2015-10125高 8.8A vulnerability classified as problematic has been found in WP Ultimate CSV Importer Plugin 3.7.2 on WordPress. This affects an unknown part…
• CVE-2022-3244中 4.2The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not have authorisation in some places, which could allow any authenticated …
• CVE-2022-3243高 7.2The Import all XML, CSV & TXT WordPress plugin before 6.5.8 does not properly sanitise and escape imported data before using them back SQL s…
• CVE-2022-1977高 7.2The Import Export All WordPress Images, Users & Post Types WordPress plugin before 6.5.3 does not fully validate the file to be imported via…
• CVE-2018-20967高 8.8The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF.