CVE-2024-5080

概要

参考情報

• wpscan.com/vulnerability/15f78aad-001c-4219-aa7e-46537e1357a2 · Exploit

wp emember のその他の脆弱性

• CVE-2024-5081中 6.1The wp-eMember WordPress plugin before v10.7.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, whi…
• CVE-2024-5744中 6.8The wp-eMember WordPress plugin before 10.6.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribut…
• CVE-2024-5715高 7.1The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a R…
• CVE-2024-5079中 6.1The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape some of the fields when members register, which allows unauthenti…
• CVE-2024-5077中 6.8The wp-eMember WordPress plugin before 10.6.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, whic…