CVE-2024-32799

概要

参考情報

• patchstack.com/database/vulnerability/easy-property-listings/wordpress-easy-property-listings-plugin-3-5-3-broken-access-control-vulnerability · Third Party Advisory

easy property listings のその他の脆弱性

• CVE-2024-2869中 4.8The Easy Property Listings WordPress plugin before 3.5.4 does not sanitise and escape some of its settings, which could allow high privilege…
• CVE-2024-3163中 4.3The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which could allow attacker…
• CVE-2024-1893高 8.8The Easy Property Listings plugin for WordPress is vulnerable to time-based SQL Injection via the ‘property_status’ shortcode attribute in a…
• CVE-2020-5530高 8.8Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authen…
• CVE-2019-15817中 6.1The easy-property-listings plugin before 3.4 for WordPress has XSS.