CVE-2022-36798

概要

参考情報

• patchstack.com/database/vulnerability/mega-addons-for-visual-composer/wordpress-mega-addons-for-wpbakery-page-builder-plugin-4-2-7-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
• wordpress.org/plugins/mega-addons-for-visual-composer · Product

mega addons for wpbakery page builder のその他の脆弱性

• CVE-2023-0268中 5.4The Mega Addons For WPBakery Page Builder WordPress plugin before 4.3.0 does not validate and escape some of its shortcode attributes before…
• CVE-2022-4501中 6.5The Mega Addons plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the vc_saving_data function …