CVE-2024-22141

概要

参考情報

• patchstack.com/database/vulnerability/profile-builder-pro/wordpress-profile-builder-pro-plugin-3-10-0-totp-secret-key-exposure-vulnerability · Third Party Advisory

profile builder のその他の脆弱性

• CVE-2024-6708中 4.8The User Profile Builder WordPress plugin before 3.12.2 does not sanitise and escape some parameters before outputting its content on the a…
• CVE-2024-6695緊急 9.8it's possible for an attacker to gain administrative access without having any kind of account on the targeted site and perform unauthorized…
• CVE-2024-6366緊急 9.1The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media …
• CVE-2024-0324高 7.5The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to unautho…
• CVE-2024-22140高 8.8Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3…