CVE-2023-34007

概要

参考情報

• patchstack.com/database/vulnerability/download-monitor/wordpress-download-monitor-plugin-4-8-3-arbitrary-file-upload-vulnerability · Third Party Advisory

download monitor のその他の脆弱性

• CVE-2022-4972高 7.5The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes…
• CVE-2024-8552中 4.3The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enable…
• CVE-2024-30501高 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPChill Download Monitor.This issue af…
• CVE-2022-45354高 7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: fr…
• CVE-2023-31219中 4.9Server-Side Request Forgery (SSRF) vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.1.