CVE-2024-43978

概要

参考情報

• patchstack.com/database/Wordpress/Plugin/superstorefinder-wp/vulnerability/wordpress-super-store-finder-plugin-6-9-8-sql-injection-vulnerability

super store finder のその他の脆弱性

• CVE-2024-13440高 8.2The Super Store Finder plugin for WordPress is vulnerable to SQL Injection via the ‘ssf_wp_user_name’ parameter in all versions up to, and i…
• CVE-2024-43975中 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in highwarden Super Store Finder supersto…
• CVE-2024-43976緊急 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in highwarden Super Store Finder supersto…
• CVE-2023-43835高 8.8Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote Code Execution when s…
• CVE-2023-44044高 7.2Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php.