CVE-2022-38058

概要

参考情報

• patchstack.com/database/vulnerability/wp-shamsi/wordpress-wp-shamsi-plugin-4-1-1-authenticated-plugin-setting-change-vulnerability/_s_id=cve · Third Party Advisory
• wordpress.org/plugins/wp-shamsi · Product

wp shamsi のその他の脆弱性

• CVE-2023-0335中 6.5The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with role as low as subscri…
• CVE-2022-4555中 5.3The WP Shamsi plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the deactivate() function hook…