CVE-2024-39638

概要

参考情報

• patchstack.com/database/vulnerability/registrations-for-the-events-calendar/wordpress-registrations-for-the-events-calendar-plugin-2-12-2-sql-injection-vulnerability · Third Party Advisory

registrations for the events calendar のその他の脆弱性

• CVE-2024-10703中 6.1The Registrations for the Events Calendar WordPress plugin before 2.13.4 does not sanitise and escape some of its settings, which could all…
• CVE-2024-7982緊急 9.6The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event …
• CVE-2021-25083中 6.1The Registrations for the Events Calendar WordPress plugin before 2.7.10 does not escape the qtype parameter before outputting it back in an…
• CVE-2021-24943緊急 9.8The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the event_id in the rtec_send_unregiste…
• CVE-2021-24876中 6.1The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not escape the v parameter before outputting it back in an attr…