CVE-2024-13693

概要

参考情報

• themeforest.net/item/enfold-responsive-multipurpose-theme/4519990 · Product
• wordfence.com/threat-intel/vulnerabilities/id/61a9ad18-28d4-488c-b3a7-e35745f9c83e · Third Party Advisory

enfold のその他の脆弱性

• CVE-2024-13695中 5.4The Enfold theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.0.9 via the 'attachment_…
• CVE-2024-5061中 5.4The Enfold - Responsive Multi-Purpose Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wrapper_class’ and 'cl…
• CVE-2024-37199中 6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kriesi.At Enfold allows Reflect…
• CVE-2023-38400中 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kriesi Enfold - Responsive Multi-Purpo…
• CVE-2021-24719中 6.1The Enfold Enfold WordPress theme before 4.8.4 was vulnerable to Reflected Cross-Site Scripting (XSS). The vulnerability is present on Enfol…