CVE-2024-1855

概要

参考情報

• plugins.trac.wordpress.org/browser/wp-cafe/trunk/core/action/wpc-ajax-action.php · Product
• plugins.trac.wordpress.org/changeset/3084054/wp-cafe/trunk/core/action/wpc-ajax-action.php · Patch
• wordfence.com/threat-intel/vulnerabilities/id/5f83c19e-1b75-4fea-b4de-f7f844a449c0 · Third Party Advisory

wpcafe のその他の脆弱性

• CVE-2023-47805緊急 9.8Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This…
• CVE-2024-43135高 8.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows PHP Local File Inc…
• CVE-2024-37513高 8.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows Path Traversal.Thi…
• CVE-2024-5431高 8.8The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Local F…
• CVE-2024-5427中 5.4The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Stored …