CVE-2022-40193

概要

参考情報

• patchstack.com/database/vulnerability/awesome-filterable-portfolio/wordpress-awesome-filterable-portfolio-plugin-1-9-7-unauthenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve · Broken Link
• wordpress.org/plugins/awesome-filterable-portfolio · Third Party Advisory

awesome filterable portfolio のその他の脆弱性

• CVE-2022-35238中 5.3Unauthenticated Plugin Settings Change vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordPress.
• CVE-2015-9461高 7.2The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter…