CVE-2024-43214

Mô tả

Tham khảo

• patchstack.com/database/Wordpress/Plugin/mycred/vulnerability/wordpress-mycred-plugin-2-7-2-sensitive-data-exposure-vulnerability

Lỗ hổng khác của mycred

• CVE-2023-47853TRUNG BÌNH 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in myCred myCred – Points, Rewards, Gamif…
• CVE-2023-35096CAO 8.8Cross-Site Request Forgery (CSRF) vulnerability in myCred plugin <= 2.5 versions.
• CVE-2022-1092TRUNG BÌNH 4.3The myCred WordPress plugin before 2.4.3.1 does not have authorisation and CSRF checks in its mycred-tools-import-export AJAX action, allowi…
• CVE-2022-0363TRUNG BÌNH 4.3The myCred WordPress plugin before 2.4.3.1 does not have any authorisation and CSRF checks in the mycred-tools-import-export AJAX action, al…
• CVE-2022-0287TRUNG BÌNH 4.3The myCred WordPress plugin before 2.4.4.1 does not have any authorisation in place in its mycred-tools-select-user AJAX action, allowing an…