CVE-2024-34824

概要

参考情報

• patchstack.com/database/vulnerability/sportspress/wordpress-sportspress-sports-club-league-manager-plugin-2-7-20-broken-access-control-vulnerability · Third Party Advisory

sportspress のその他の脆弱性

• CVE-2024-3986中 4.8The SportsPress WordPress plugin before 2.7.22 does not sanitise and escape some of its settings, which could allow high privilege users su…
• CVE-2024-1178中 5.3The SportsPress – Sports Club & League Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa…
• CVE-2021-24578中 6.1The SportsPress WordPress plugin before 2.7.9 does not sanitise and escape its match_day parameter before outputting back in the Events back…
• CVE-2020-13892中 5.4The SportsPress plugin before 2.7.2 for WordPress allows XSS.