CVE-2024-43954

概要

参考情報

• patchstack.com/database/vulnerability/droip/wordpress-droip-plugin-1-1-1-subscriber-settings-change-data-exposure-vulnerability

droip のその他の脆弱性

• CVE-2025-5835高 8.8The Droip plugin for WordPress is vulnerable to unauthorized modification and access of data due to a missing capability check on the droip_…
• CVE-2025-5831高 8.8The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the make_google_font_offline()…
• CVE-2024-43955高 7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themeum Droip allows File Manipulation.This …