CVE-2020-13640

Mô tả

Tham khảo

• openwall.com/lists/oss-security/2020/07/06/1 · Exploit
• plugins.trac.wordpress.org/browser/wpdiscuz/tags/5.3.6 · Third Party Advisory
• plugins.trac.wordpress.org/changeset/2323200 · Third Party Advisory
• wordpress.org/plugins/wpdiscuz · Release Notes
• wpdiscuz.com/community/news/security-vulnerability-issue-in-5-3-5-please-udate · Patch

Lỗ hổng khác của wpdiscuz

• CVE-2026-22216TRUNG BÌNH 5.3wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated attackers to subscribe arbitrary email add…
• CVE-2026-22215TRUNG BÌNH 5.4wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability in the getFollowsPage() function that allows attackers to trigger…
• CVE-2026-22210TRUNG BÌNH 6.1wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability that allows attackers to inject malicious code through unescaped attach…
• CVE-2026-22209TRUNG BÌNH 5.5wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability in the customCss field that allows administrators to inject malicious s…
• CVE-2026-22204TRUNG BÌNH 5.3wpDiscuz before 7.6.47 contains an email header injection vulnerability that allows attackers to manipulate mail recipients by injecting mal…