CVE-2023-4686

概要

参考情報

• plugins.trac.wordpress.org/browser/wp-customer-reviews/trunk/include/admin/wp-customer-reviews-3-admin.php · Product
• plugins.trac.wordpress.org/changeset/2965656/wp-customer-reviews/trunk · Patch
• wordfence.com/threat-intel/vulnerabilities/id/24b9984c-ec33-4492-815b-67a21ac4da0e · Third Party Advisory

wp customer reviews のその他の脆弱性

• CVE-2024-1849中 5.4The WP Customer Reviews WordPress plugin before 3.7.1 does not validate a parameter allowing contributor and above users to redirect a page …
• CVE-2023-4648中 4.8The WP Customer Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and includin…
• CVE-2021-24296中 4.8The WP Customer Reviews WordPress plugin before 3.5.6 did not sanitise some of its settings, allowing high privilege users such as administr…
• CVE-2021-24135中 6.1Unvalidated input and lack of output encoding in the WP Customer Reviews WordPress plugin, versions before 3.4.3, lead to multiple Stored Cr…
• CVE-2016-10902高 8.8The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools.