CVE-2024-5081

概要

参考情報

• wpscan.com/vulnerability/4f02bdb5-5cf6-4519-9586-fd4fb3d45dea · Exploit

wp emember のその他の脆弱性

• CVE-2024-5744中 6.8The wp-eMember WordPress plugin before 10.6.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribut…
• CVE-2024-5715高 7.1The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a R…
• CVE-2024-5080高 8.8The wp-eMember WordPress plugin before 10.6.6 does not validate files to be uploaded, which could allow admins to upload arbitrary files suc…
• CVE-2024-5079中 6.1The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape some of the fields when members register, which allows unauthenti…
• CVE-2024-5077中 6.8The wp-eMember WordPress plugin before 10.6.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, whic…