CVE-2022-29450

概要

参考情報

• oliverschloebe/admin-management-xtended commit f94732d · Patch
• patchstack.com/database/vulnerability/admin-management-xtended/wordpress-admin-management-xtended-plugin-2-4-4-multiple-cross-site-request-forgery-csrf-vulnerabilities · Third Party Advisory

admin management xtended のその他の脆弱性

• CVE-2022-1599中 6.5The Admin Management Xtended WordPress plugin before 2.4.5 does not have CSRF checks in some of its AJAX actions, allowing attackers to make…
• CVE-2015-9390中 4.3The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp_ajax functions are mishandled.