CVE-2023-0992

概要

参考情報

• plugins.trac.wordpress.org/changeset · Patch
• wordpress.org/plugins/wp-simple-firewall · Product
• wordfence.com/blog/2023/04/multiple-vulnerabilities-patched-in-shield-security
• wordfence.com/threat-intel/vulnerabilities/id/162dff28-94ea-4a47-a6cb-a13317cf1a04 · Third Party Advisory

shield security のその他の脆弱性

• CVE-2024-7313中 6.1The Shield Security WordPress plugin before 20.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading …
• CVE-2023-6989緊急 9.8The Shield Security – Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all v…
• CVE-2024-22163中 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shield Security Shield Security – Smar…
• CVE-2023-0993中 4.3The Shield Security plugin for WordPress is vulnerable to Missing Authorization on the 'theme-plugin-file' AJAX action in versions up to, an…
• CVE-2022-0211中 4.8The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perfo…