CVE-2022-27847

概要

参考情報

• patchstack.com/database/vulnerability/yoo-slider/wordpress-yoo-slider-plugin-2-0-0-cross-site-request-forgery-csrf-vulnerability-leading-to-template-import · Third Party Advisory
• wordpress.org/plugins/yoo-slider · Third Party Advisory

yoo slider のその他の脆弱性

• CVE-2022-27846中 4.3Cross-Site Request Forgery (CSRF) vulnerability in Yooslider Yoo Slider <= 2.0.0 on WordPress allows attackers to create or modify slider.
• CVE-2022-25609中 5.4Stored Cross-Site Scripting (XSS) in Yoo Slider – Image Slider & Video Slider (WordPress plugin) allows attackers with contributor or higher…
• CVE-2022-25608中 5.4Cross-Site Request Forgery (CSRF) in Yoo Slider – Image Slider & Video Slider (WordPress plugin) allows attackers to trick authenticated use…