CVE-2024-43214

概要

参考情報

• patchstack.com/database/Wordpress/Plugin/mycred/vulnerability/wordpress-mycred-plugin-2-7-2-sensitive-data-exposure-vulnerability

mycred のその他の脆弱性

• CVE-2023-47853中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred myCred – Points, Rewards, Gamif…
• CVE-2023-35096高 8.8Cross-Site Request Forgery (CSRF) vulnerability in myCred plugin <= 2.5 versions.
• CVE-2022-1092中 4.3The myCred WordPress plugin before 2.4.3.1 does not have authorisation and CSRF checks in its mycred-tools-import-export AJAX action, allowi…
• CVE-2022-0363中 4.3The myCred WordPress plugin before 2.4.3.1 does not have any authorisation and CSRF checks in the mycred-tools-import-export AJAX action, al…
• CVE-2022-0287中 4.3The myCred WordPress plugin before 2.4.4.1 does not have any authorisation in place in its mycred-tools-select-user AJAX action, allowing an…