CVE-2023-2448

概要

参考情報

• codecanyon.net/item/userpro-user-profiles-with-social-login/5958681 · Product
• wordfence.com/threat-intel/vulnerabilities/id/7cbe9175-4a6f-4eb6-8d31-9a9fda9b4f40 · Third Party Advisory
• packetstormsecurity.com/files/175871/WordPress-UserPro-5.1.x-Password-Reset-Authentication-Bypass-Escalation.html · Third Party Advisory

userpro のその他の脆弱性

• CVE-2024-35700緊急 9.8Incorrect Privilege Assignment vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through <= 5.1.8.
• CVE-2024-0701中 5.3The UserPro plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 5.1.6. This is due to the us…
• CVE-2023-2439中 5.4The UserPro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'userpro' shortcode in versions up to, and including, …
• CVE-2023-6009高 8.8The UserPro plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.4 due to insufficient restricti…
• CVE-2023-6008中 4.3The UserPro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.1. This is due to missing…