CVE-2022-35238

概要

参考情報

• patchstack.com/database/vulnerability/awesome-filterable-portfolio/wordpress-awesome-filterable-portfolio-plugin-1-9-7-unauthenticated-plugin-settings-change-vulnerability/_s_id=cve · Broken Link
• wordpress.org/plugins/awesome-filterable-portfolio · Third Party Advisory

awesome filterable portfolio のその他の脆弱性

• CVE-2022-40193中 6.1Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordPress.
• CVE-2015-9461高 7.2The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter…