CVE-2023-41805

概要

参考情報

• patchstack.com/database/vulnerability/astra-pro-sites/wordpress-premium-starter-templates-plugin-3-2-5-broken-access-control-vulnerability · Third Party Advisory
• patchstack.com/database/vulnerability/astra-sites/wordpress-starter-templates-plugin-3-2-5-broken-access-control-vulnerability · Third Party Advisory

starter templates のその他の脆弱性

• CVE-2023-41804中 5.4Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver Builder Templates.Thi…
• CVE-2022-46851高 8.8Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Starter Templates plugin <= 3.1.20 versions.
• CVE-2021-42360中 5.4On sites that also had the Elementor plugin for WordPress installed, it was possible for users with the edit_posts capability, which include…