CVE-2024-31352

概要

参考情報

• patchstack.com/database/vulnerability/email-subscribers/wordpress-icegram-express-plugin-5-7-13-broken-access-control-vulnerability · Third Party Advisory

email subscribers & newsletters のその他の脆弱性

• CVE-2024-12568中 4.8The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Workflow settings, which c…
• CVE-2024-12567中 4.8The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its form settings, which could…
• CVE-2024-12566中 4.8The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of form settings, which could all…
• CVE-2024-11636中 4.8The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Text Block options, which …
• CVE-2024-12311中 6.5The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL s…