CVE-2022-2167

概要

参考情報

• wpscan.com/vulnerability/ad35fbae-1e90-47a0-b1d2-f8d91a5db90e · Exploit

newspaper のその他の脆弱性

• CVE-2024-3815中 4.8The Newspaper theme for WordPress is vulnerable to Stored Cross-Site Scripting via attachment meta in the archive page in all versions up to…
• CVE-2022-2627中 6.1The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, lea…
• CVE-2021-3135中 6.1An issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress. It allows XSS via the wp-admin/admin-ajax.php td_block_id para…
• CVE-2016-10972緊急 9.8The newspaper theme before 6.7.2 for WordPress has a lack of options access control via td_ajax_update_panel.
• CVE-2017-18634緊急 9.8The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php.