CVE-2023-45604

概要

参考情報

• patchstack.com/database/vulnerability/get-custom-field-values/wordpress-get-custom-field-values-plugin-4-0-1-cross-site-scripting-xss-vulnerability · Third Party Advisory

get custom field values のその他の脆弱性

• CVE-2021-24872中 6.5The Get Custom Field Values WordPress plugin before 4.0 allows users with a role as low as Contributor to access other posts metadata withou…
• CVE-2021-24871中 5.4The Get Custom Field Values WordPress plugin before 4.0.1 does not escape custom fields before outputting them in the page, which could allo…