CVE-2022-41987

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/badgeos/wordpress-badgeos-plugin-3-7-1-6-multiple-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

Lỗ hổng khác của badgeos

• CVE-2023-2174TRUNG BÌNH 4.3The BadgeOS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_badgeos_…
• CVE-2023-2173TRUNG BÌNH 4.3The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due to…
• CVE-2023-2172TRUNG BÌNH 4.3The BadgeOS plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.7.1.6. This is due to…
• CVE-2023-2171TRUNG BÌNH 5.4The BadgeOS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including…
• CVE-2022-0817NGHIÊM TRỌNG 9.8The BadgeOS WordPress plugin through 3.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action, l…