CVE-2024-10958

概要

参考情報

• plugins.trac.wordpress.org/browser/wp-photo-album-plus/tags/8.8.08.004/wppa-ajax.php · Product
• plugins.trac.wordpress.org/changeset/3184852 · Patch
• wordpress.org/plugins/wp-photo-album-plus · Release Notes
• wordfence.com/threat-intel/vulnerabilities/id/53bb0871-343a-4299-9902-682c422152d1 · Third Party Advisory

wp photo album plus のその他の脆弱性

• CVE-2024-37416中 6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in J.N. Breetvelt a.K.A. OpaJaap W…
• CVE-2024-4037高 7.3The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.7.02.003…
• CVE-2023-49812高 7.5Authorization Bypass Through User-Controlled Key vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This issue affects WP Ph…
• CVE-2023-49813中 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo…
• CVE-2021-25115中 6.4The WP Photo Album Plus WordPress plugin before 8.0.10 was vulnerable to Stored Cross-Site Scripting (XSS). Error log content was handled im…