CVE-2024-35728

概要

参考情報

• patchstack.com/database/vulnerability/woocommerce-product-addon/wordpress-product-addons-fields-for-woocommerce-plugin-32-0-20-content-injection-vulnerability · Third Party Advisory

product addons & fields for woocommerce のその他の脆弱性

• CVE-2024-3962緊急 9.8The Product Addons & Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation…
• CVE-2023-2256中 6.1The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.7 does not sanitize and escape some URL parameters, leading to Refl…
• CVE-2023-1839中 4.8The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.6 does not sanitize and escape some of its setting fields, which co…