CVE-2024-31248

概要

参考情報

• patchstack.com/database/vulnerability/all-in-one-video-gallery/wordpress-all-in-one-video-gallery-plugin-3-5-2-broken-access-control-vulnerability · Third Party Advisory

all-in-one video gallery のその他の脆弱性

• CVE-2024-6629中 5.4The All-in-One Video Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video shortcode in all versi…
• CVE-2022-2633高 8.2The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'd…
• CVE-2021-24970高 7.2The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require sta…