CVE-2022-4035

概要

参考情報

• plugins.trac.wordpress.org/changeset · Patch
• wordfence.com/threat-intel/vulnerabilities/id/870ae326-a7c9-4201-bf0d-0fbda663a694
• wordfence.com/vulnerability-advisories-continued · Third Party Advisory

appointment hour booking のその他の脆弱性

• CVE-2022-4036中 5.3The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.72. This is due to t…
• CVE-2022-4034高 7.8The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.72. This makes it pos…
• CVE-2022-41692高 8.8Missing Authorization vulnerability in Appointment Hour Booking plugin <= 1.3.71 on WordPress.
• CVE-2022-1710中 4.8The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allo…
• CVE-2021-24712中 5.4The Appointment Hour Booking WordPress plugin before 1.3.17 does not properly sanitize values used when creating new calendars.