مجموعه آسیب‌پذیری‌ها با سطح خطر بالا و بحرانی در WordPress

admin
WordPress, آسیب پذیری, امنیت, امنیت سایبری, امنیت شبکه, هاویرتک, وردپرس
0 نظر
580 بازدید

شناسایی مجموعه آسیب‌پذیری‌ها با سطح خطر بالا و بحرانی در WordPress شامل افزونه‌های BMI Adult & Kid Calculator تا نسخه 1.2.1، Related Posts for WordPress تا نسخه 4.0.3، WP Poll Maker تا نسخه 3.4، Easy CountDowner تا نسخه 1.0.8، Access Category Password تا نسخه 1.5.1، LH Add Media From Url تا نسخه 1.22، WP-Cufon تا نسخه 1.6.10، Bulk Block Converter تا نسخه 1.0.1، MJ Update History تا نسخه 1.0.4، Netgsm تا نسخه 2.8، Canva – Design beautiful blog graphics تا نسخه 1.2.4، Tax Rate Upload تا نسخه 2.4.5، Simple File List تا نسخه 6.1.9، WP Cost Estimation & Payment Forms Builder تا نسخه 10.1.75، WP Dynamic Keywords Injector تا نسخه 2.3.18، GuCherry Blog تا نسخه 1.1.8، JS Help Desk – Best Help Desk & Support Plugin تا نسخه 2.7.1، JVM rich text icons تا نسخه 1.2.6 و Uncode Core تا نسخه 2.8.8 امکان کنترل دسترسی نادرست، CSRF، بارگذاری فایل مخرب، XSS، حذف فایل دلخواه و تزریق SQL را برای مهاجم فراهم می‌سازد.

شناسه آسیب‌پذیری	شدت آسیب‌پذیری		لینک راهکار	توضیحات
شناسه آسیب‌پذیری	Vendor	NVD	لینک راهکار	توضیحات
CVE-2024-32550	7.1	نامشخص	https://patchstack.com/database/vulnerability/bmi-adultkid-calculator/wordpress-bmi-adult-kid-calculator-plugin-1-2-1-broken-access-control-to-xss-vulnerability?_s_id=cve
CVE-2024-32549	7.1	نامشخص	https://patchstack.com/database/vulnerability/microkids-related-posts/wordpress-related-posts-for-wordpress-plugin-4-0-3-csrf-to-xss-vulnerability?_s_id=cve
CVE-2024-32514	9.9	نامشخص	https://patchstack.com/database/vulnerability/epoll-wp-voting/wordpress-wp-poll-maker-plugin-3-4-authenticated-arbitrary-file-upload-vulnerability?_s_id=cve
CVE-2024-32538	7.1	نامشخص	https://patchstack.com/database/vulnerability/easy-countdowner/wordpress-easy-countdowner-plugin-1-0-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE-2024-32535	7.1	نامشخص	https://patchstack.com/database/vulnerability/access-category-password/wordpress-access-category-password-plugin-1-5-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE-2024-32533	7.1	نامشخص	https://patchstack.com/database/vulnerability/lh-add-media-from-url/wordpress-lh-add-media-from-url-plugin-1-22-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE-2024-32541	7.1	نامشخص	https://patchstack.com/database/vulnerability/wp-cufon/wordpress-wp-cufon-plugin-1-6-10-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE-2024-32542	7.1	نامشخص	https://patchstack.com/database/vulnerability/bulk-block-converter/wordpress-bulk-block-converter-plugin-1-0-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE-2024-32543	7.1	نامشخص	https://patchstack.com/database/vulnerability/mj-update-history/wordpress-mj-update-history-plugin-1-0-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE-2024-32544	7.1	نامشخص	https://patchstack.com/database/vulnerability/netgsm/wordpress-netgsm-plugin-2-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE-2024-32545	7.1	نامشخص	https://patchstack.com/database/vulnerability/canva/wordpress-canva-design-beautiful-blog-graphics-plugin-1-2-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE-2024-32546	7.1	نامشخص	https://patchstack.com/database/vulnerability/tax-rate-upload/wordpress-tax-rate-upload-plugin-2-4-5-cross-site-scripting-xss-vulnerability-2?_s_id=cve
CVE-2023-44227	7.5	نامشخص	https://patchstack.com/database/vulnerability/simple-file-list/wordpress-simple-file-list-plugin-6-1-8-arbitrary-file-deletion?_s_id=cve
CVE-2024-32510	7.1	نامشخص	https://patchstack.com/database/vulnerability/wp-estimation-form/wordpress-wp-cost-estimation-payment-forms-builder-plugin-10-1-75-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE-2024-32528	7.1	نامشخص	https://patchstack.com/database/vulnerability/wp-dynamic-keywords-injector/wordpress-wp-dynamic-keywords-injector-plugin-2-3-18-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE-2024-32531	7.1	نامشخص	https://patchstack.com/database/vulnerability/gucherry-blog/wordpress-gucherry-blog-theme-1-1-8-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE-2022-47151	8.6	نامشخص	https://patchstack.com/database/vulnerability/js-support-ticket/wordpress-js-help-desk-plugin-2-7-1-unauthenticated-sql-injection-vulnerability?_s_id=cve
CVE-2023-51418	7.7	نامشخص	https://patchstack.com/database/vulnerability/jvm-rich-text-icons/wordpress-jvm-rich-text-icons-plugin-1-2-6-arbitrary-file-deletion-vulnerability?_s_id=cve
CVE-2023-51500	7.7	نامشخص	https://patchstack.com/database/vulnerability/uncode-core/wordpress-uncode-core-plugin-2-8-8-arbitrary-file-deletion-vulnerability?_s_id=cve

برچسب ها: WordPress آسیب پذیری امنیت امنیت سایبری امنیت شبکه هاویرتک وردپرس

admin

administrator

09374683780