CVE-2024-5076

概要

参考情報

• wpscan.com/vulnerability/01cbc841-a30f-4df5-ab7f-0c2c7469657b · Exploit

wp emember のその他の脆弱性

• CVE-2024-5081中 6.1The wp-eMember WordPress plugin before v10.7.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, whi…
• CVE-2024-5744中 6.8The wp-eMember WordPress plugin before 10.6.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribut…
• CVE-2024-5715高 7.1The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a R…
• CVE-2024-5080高 8.8The wp-eMember WordPress plugin before 10.6.6 does not validate files to be uploaded, which could allow admins to upload arbitrary files suc…
• CVE-2024-5079中 6.1The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape some of the fields when members register, which allows unauthenti…