CVE-2024-56276

概要

参考情報

• patchstack.com/database/Wordpress/Plugin/wpforms-lite/vulnerability/wordpress-wpforms-lite-plugin-1-9-2-2-broken-access-control-vulnerability · Third Party Advisory

wpforms のその他の脆弱性

• CVE-2020-36919中 6.1WPForms 1.7.8 contains a cross-site scripting vulnerability in the slider import search feature and tab parameter. Attackers can inject mali…
• CVE-2024-13403中 5.4The WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More plugin for WordPress is vulnerable to Stored C…
• CVE-2024-11223中 4.7The WPForms WordPress plugin before 1.9.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such …
• CVE-2024-11205中 6.5The WPForms plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpforms_is_adm…
• CVE-2024-7056低 3.5The WPForms WordPress plugin before 1.9.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such …