CVE-2024-22140

概要

参考情報

• patchstack.com/database/vulnerability/profile-builder-pro/wordpress-profile-builder-pro-plugin-3-10-0-csrf-leading-to-account-takeover-vulnerability · Third Party Advisory

profile builder のその他の脆弱性

• CVE-2024-6708中 4.8The User Profile Builder WordPress plugin before 3.12.2 does not sanitise and escape some parameters before outputting its content on the a…
• CVE-2024-6695緊急 9.8it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized…
• CVE-2024-6366緊急 9.1The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media …
• CVE-2024-0324高 7.5The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to unautho…
• CVE-2024-22141高 7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builde…