CVE-2024-2040

概要

参考情報

• wpscan.com/vulnerability/1b97bbf0-c7d1-4e6c-bb80-f9bf45fbfe1e · Exploit

himer のその他の脆弱性

• CVE-2024-2232高 8.1The lacks CSRF checks allowing a user to invite any user to any group (including private groups)
• CVE-2024-2235中 4.3The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make users vote on any polls…
• CVE-2024-2234中 5.4The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high privilege users such a…
• CVE-2024-2233中 4.3The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform…
• CVE-2024-2231中 6.5The allows any authenticated user to join a private group due to a missing authorization check on a function