CVE-2022-40963

概要

参考情報

• patchstack.com/database/vulnerability/wp-pagebuilder/wordpress-wp-page-builder-plugin-1-2-6-multiple-auth-stored-cross-site-scripting-xss-vulnerabilities · Third Party Advisory
• wordpress.org/plugins/wp-pagebuilder · Third Party Advisory

wp page builder のその他の脆弱性

• CVE-2022-3830中 4.8The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users…
• CVE-2021-24208中 5.4The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML, including JavaScrip…
• CVE-2021-24207中 4.3By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pa…