CVE-2024-4266

概要

参考情報

• plugins.trac.wordpress.org/browser/metform/trunk/core/entries/action.php · Product
• plugins.trac.wordpress.org/changeset/3099977 · Patch
• wordfence.com/threat-intel/vulnerabilities/id/8edb72f5-dda3-4c59-ba7a-7a460cb59c03 · Third Party Advisory

metform elementor contact form builder のその他の脆弱性

• CVE-2023-50903緊急 9.8Missing Authorization vulnerability in Roxnor Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This i…
• CVE-2023-0714緊急 9.8The Metform Elementor Contact Form Builder for WordPress is vulnerable to Arbitrary File Upload due to insufficient file type validation in …
• CVE-2024-33570高 8.8Missing Authorization vulnerability in Roxnor Metform metform.This issue affects Metform: from n/a through <= 3.8.3.
• CVE-2024-2791中 5.4The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all…
• CVE-2024-1585中 5.4The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) i…