CVE-2023-4626

概要

参考情報

• plugins.trac.wordpress.org/browser/ladipage/trunk/ladipage.php · Patch
• wordfence.com/threat-intel/vulnerabilities/id/47dccf26-6c8d-4418-a874-c29749bee537 · Third Party Advisory

ladipage のその他の脆弱性

• CVE-2023-4731中 4.3The LadiApp plugn for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the init_endpoint() function hoo…
• CVE-2023-4729中 4.3The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the publish_lp() function hooke…
• CVE-2023-4728中 5.4The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the publish_lp() fu…
• CVE-2023-4629中 4.3The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the save_config() function in v…
• CVE-2023-4628中 4.3The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the ladiflow_save_hook() functi…