CVE-2023-22692

概要

参考情報

• patchstack.com/database/vulnerability/name-directory/wordpress-name-directory-plugin-1-27-1-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

name directory のその他の脆弱性

• CVE-2022-2072中 6.1The Name Directory WordPress plugin before 1.25.3 does not sanitise and escape a parameter before outputting it back in the page, leading to…
• CVE-2022-2071中 6.1The Name Directory WordPress plugin before 1.25.4 does not have CSRF check when importing names, and is also lacking sanitisation as well as…
• CVE-2021-20652高 8.8Cross-site request forgery (CSRF) vulnerability in Name Directory 1.17.4 and earlier allows remote attackers to hijack the authentication of…