CVE-2024-50446

概要

参考情報

• patchstack.com/database/Wordpress/Plugin/futurio-extra/vulnerability/wordpress-futurio-extra-plugin-2-0-11-cross-site-scripting-xss-vulnerability

futurio extra のその他の脆弱性

• CVE-2024-53802中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FuturioWP Futurio Extra futurio-extra …
• CVE-2024-10695中 4.3The Futurio Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.0.13 via the 'elementor…
• CVE-2024-5646中 5.4The Futurio Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘header_size’ attribute within the Advanced Text…
• CVE-2023-40201高 8.8Cross-Site Request Forgery (CSRF) vulnerability in FuturioWP Futurio Extra plugin <= 1.8.4 versions leads to activation of arbitrary plugin.
• CVE-2021-25110中 4.3The Futurio Extra WordPress plugin before 1.6.3 allows any logged in user, such as subscriber, to extract any other user's email address.