CVE-2022-30536

概要

参考情報

• patchstack.com/database/vulnerability/wp-maintenance/wordpress-wp-maintenance-plugin-6-0-7-authenticated-stored-cross-site-scripting-xss-vulnerability · Patch
• wordpress.org/plugins/wp-maintenance · Release Notes

wp maintenance のその他の脆弱性

• CVE-2021-36828中 4.8Authenticated (admin+) Stored Cross-Site Scripting (XSS) in WP Maintenance plugin <= 6.0.7 versions.
• CVE-2019-19979高 8.8A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject mal…