CVE-2023-1373

概要

参考情報

• wpscan.com/vulnerability/fa38f3e6-e04c-467c-969b-0f6736087589 · Exploit

w4 post list のその他の脆弱性

• CVE-2023-27413中 5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Shazzad Hossain Khan W4 Post List plugin <= 2.4.4 versions.
• CVE-2023-1371中 6.5The W4 Post List WordPress plugin before 2.4.6 does not ensure that password protected posts can be accessed before displaying their content…
• CVE-2023-0374中 5.4The W4 Post List WordPress plugin before 2.4.6 does not validate and escape some of its block options before outputting them back in a page/…