CVE-2024-38693

概要

参考情報

• patchstack.com/database/vulnerability/wp-user-frontend/wordpress-wp-user-frontend-plugin-4-0-7-sql-injection-vulnerability · Third Party Advisory

wp user frontend のその他の脆弱性

• CVE-2021-24649緊急 9.8The WP User Frontend WordPress plugin before 3.5.29 uses a user supplied argument called urhidden in its registration form, which contains t…
• CVE-2021-25076高 8.8The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in …