CVE-2023-47853

概要

参考情報

• patchstack.com/database/vulnerability/mycred/wordpress-mycred-plugin-2-6-1-cross-site-scripting-xss-vulnerability · Third Party Advisory

mycred のその他の脆弱性

• CVE-2024-43214中 5.3Missing Authorization vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2.
• CVE-2023-35096高 8.8Cross-Site Request Forgery (CSRF) vulnerability in myCred plugin <= 2.5 versions.
• CVE-2022-1092中 4.3The myCred WordPress plugin before 2.4.3.1 does not have authorisation and CSRF checks in its mycred-tools-import-export AJAX action, allowi…
• CVE-2022-0363中 4.3The myCred WordPress plugin before 2.4.3.1 does not have any authorisation and CSRF checks in the mycred-tools-import-export AJAX action, al…
• CVE-2022-0287中 4.3The myCred WordPress plugin before 2.4.4.1 does not have any authorisation in place in its mycred-tools-select-user AJAX action, allowing an…