CVE-2022-36386

概要

参考情報

• patchstack.com/database/vulnerability/wp-all-import/wordpress-import-any-xml-or-csv-file-to-wordpress-plugin-3-6-7-authenticated-arbitrary-code-execution-vulnerability · Third Party Advisory
• wordpress.org/plugins/wp-all-import · Product

wp all import のその他の脆弱性

• CVE-2024-9664高 7.2The WP All Import Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.9.7 via deserializa…
• CVE-2022-3418高 7.2The Import any XML or CSV File to WordPress plugin before 3.6.9 is not properly filtering which file extensions are allowed to be imported o…
• CVE-2022-2711高 7.2The Import any XML or CSV File to WordPress plugin before 3.6.9 is not validating the paths of files contained in uploaded zip archives, all…
• CVE-2022-2268高 7.2The Import any XML or CSV File to WordPress plugin before 3.6.8 accepts all zip files and automatically extracts the zip file without valida…
• CVE-2021-24714中 4.8The Import any XML or CSV File to WordPress plugin before 3.6.3 does not escape the Import's Title and Unique Identifier fields before outpu…