CVE-2022-25602

概要

参考情報

• patchstack.com/database/vulnerability/responsive-menu/wordpress-responsive-menu-plugin-4-1-7-nonce-token-leak-leading-to-arbitrary-file-upload-theme-deletion-plugin-settings-change-vulnerability · Third Party Advisory
• wordpress.org/plugins/responsive-menu · Product

responsive menu のその他の脆弱性

• CVE-2021-24162高 8.8In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into importi…
• CVE-2021-24161高 8.8In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploadi…
• CVE-2021-24160高 8.8In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files th…
• CVE-2017-18513高 8.8The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface.