CVE-2024-5744

概要

参考情報

• wpscan.com/vulnerability/ba50e25c-7250-4025-a72f-74f8eb756246 · Exploit

wp emember のその他の脆弱性

• CVE-2024-5081中 6.1The wp-eMember WordPress plugin before v10.7.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, whi…
• CVE-2024-5715高 7.1The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a R…
• CVE-2024-5080高 8.8The wp-eMember WordPress plugin before 10.6.6 does not validate files to be uploaded, which could allow admins to upload arbitrary files suc…
• CVE-2024-5079中 6.1The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape some of the fields when members register, which allows unauthenti…
• CVE-2024-5077中 6.8The wp-eMember WordPress plugin before 10.6.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, whic…