CVE-2024-13818

概要

参考情報

• plugins.trac.wordpress.org/browser/pie-register/trunk/classes/base_variables.php · Product
• plugins.trac.wordpress.org/changeset
• wordfence.com/threat-intel/vulnerabilities/id/768730c1-a70e-432d-a234-4ce2b8aec424 · Third Party Advisory

pie register のその他の脆弱性

• CVE-2024-27957緊急 9.8Unrestricted Upload of File with Dangerous Type vulnerability in Pie Register.This issue affects Pie Register: from n/a through 3.8.3.1.
• CVE-2023-0552中 5.4The Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in and login out, leading…
• CVE-2022-4024中 6.5The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, …
• CVE-2021-24731緊急 9.8The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.7.…
• CVE-2021-24647高 8.1The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.…