CVE-2022-0478

概要

参考情報

• plugins.trac.wordpress.org/changeset/2671860 · Patch
• wpscan.com/vulnerability/d881d725-d06b-464f-a25e-88f41b1f431f · Exploit

event manager and tickets selling for woocommerce のその他の脆弱性

• CVE-2025-5568中 5.4The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including…
• CVE-2024-43138高 8.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in MagePeople Team Event Manager for WooCommerc…
• CVE-2024-24796高 8.8Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – Wo…
• CVE-2023-36383中 5.4Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce …
• CVE-2023-28422中 4.8Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooCommerce <…