CVE-2022-4943

概要

参考情報

• plugins.trac.wordpress.org/changeset · Product
• wordfence.com/threat-intel/vulnerabilities/id/7267ede1-7745-47cc-ac0d-4362140b4c23 · Third Party Advisory

google authenticator のその他の脆弱性

• CVE-2022-44589高 7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in miniOrange miniOrange's Google Authenticator – WordPress Two Fac…
• CVE-2022-42461高 8.8Broken Access Control vulnerability in miniOrange's Google Authenticator plugin <= 5.6.1 on WordPress.
• CVE-2022-1321中 4.8The miniOrange's Google Authenticator WordPress plugin before 5.5.6 does not sanitise and escape some of its settings, leading to malicious …
• CVE-2022-0875中 4.3The Google Authenticator WordPress plugin before 1.0.5 does not have CSRF check when saving its settings, and does not sanitise as well as e…
• CVE-2022-0229高 8.1The miniOrange's Google Authenticator WordPress plugin before 5.5 does not have proper authorisation and CSRF checks when handling the recon…