CVE-2023-47777

概要

参考情報

• patchstack.com/articles/authenticated-stored-xss-in-woocommerce-and-jetpack-plugin · Exploit
• patchstack.com/database/vulnerability/woo-gutenberg-products-block/wordpress-woocommerce-blocks-plugin-11-1-1-cross-site-scripting-xss-vulnerability · Third Party Advisory
• patchstack.com/database/vulnerability/woocommerce/wordpress-woocommerce-plugin-8-1-1-contributor-cross-site-scripting-xss-vulnerability · Third Party Advisory

woocommerce のその他の脆弱性

• CVE-2024-1310中 4.9The WooCommerce WordPress plugin before 8.6 does not prevent users with at least the contributor role from leaking products they shouldn't h…
• CVE-2017-17058高 7.5The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/ema…