CVE-2024-2233

概要

参考情報

• wpscan.com/vulnerability/51d0311a-673b-4538-9427-a48e8c89e38b · Exploit

himer のその他の脆弱性

• CVE-2024-2232高 8.1The lacks CSRF checks allowing a user to invite any user to any group (including private groups)
• CVE-2024-2235中 4.3The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make users vote on any polls…
• CVE-2024-2234中 5.4The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high privilege users such a…
• CVE-2024-2231中 6.5The allows any authenticated user to join a private group due to a missing authorization check on a function
• CVE-2024-2040中 4.3The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make users join private grou…