CVE-2024-44046

概要

参考情報

• patchstack.com/database/Wordpress/Plugin/themify-wc-product-filter/vulnerability/wordpress-themify-plugin-1-5-1-cross-site-scripting-xss-vulnerability

woocommerce product filter のその他の脆弱性

• CVE-2024-2278中 6.1Themify WordPress plugin before 1.4.4 does not sanitise and escape some of its Filters settings, which could allow high privilege users suc…
• CVE-2024-2263中 4.8Themify WordPress plugin before 1.4.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflecte…
• CVE-2024-2262中 4.7Themify WordPress plugin before 1.4.4 does not have CSRF check in its bulk action, which could allow attackers to make logged in users dele…
• CVE-2022-1532中 6.1Themify WordPress plugin before 1.3.8 does not sanitise and escape the page parameter before outputting it back in an attribute in an admin …