CVE-2023-34002

概要

参考情報

• patchstack.com/database/vulnerability/wp-inventory-manager/wordpress-wp-inventory-manager-plugin-2-1-0-13-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

wp inventory manager のその他の脆弱性

• CVE-2023-2123中 6.1The WP Inventory Manager WordPress plugin before 2.1.0.13 does not sanitise and escape a parameter before outputting it back in the page, le…
• CVE-2023-2842高 8.1The WP Inventory Manager WordPress plugin before 2.1.0.14 does not have CSRF checks, which could allow attackers to make logged-in admins de…
• CVE-2023-1806中 6.1The WP Inventory Manager WordPress plugin before 2.1.0.12 does not sanitise and escape the message parameter before outputting it back in th…