CVE-2022-40963

Description

References

• patchstack.com/database/vulnerability/wp-pagebuilder/wordpress-wp-page-builder-plugin-1-2-6-multiple-auth-stored-cross-site-scripting-xss-vulnerabilities · Third Party Advisory
• wordpress.org/plugins/wp-pagebuilder · Third Party Advisory

wp page builder 的其他漏洞

• CVE-2022-3830中危 4.8The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users…
• CVE-2021-24208中危 5.4The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML, including JavaScrip…
• CVE-2021-24207中危 4.3By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pa…