WP 安全漏洞報告

WordPress atec Debug 插件 <= 1.2.22 - 經身份驗證的（管理員+）任意文件刪除漏洞

WordPress Make Connector 插件 <= 1.5.10 - 經身份驗證的（管理員+）任意文件上傳漏洞

WordPress Skyword API Plugin plugin <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

WordPress TablePress 插件 <= 3.2 - 經過身份驗證的 (貢獻者+) 通過 shortcode_debug 參數的存儲型跨站腳本漏洞

WordPress Ocean Extra plugin <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library Shortcode vulnerability

WordPress WooCommerce 插件 <= 7.2.4 - 未經身份驗證的雙擴展任意文件上傳漏洞

WordPress Slider Revolution plugin <= 6.7.36 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images' vulnerability

WordPress iATS 在線表單外掛 <= 1.2 - 經過身份驗證的 (貢獻者+) SQL 注入透過訂單參數漏洞

WordPress Related Posts Lite plugin <= 1.12 - Cross-Site Request Forgery vulnerability

WordPress Ultimate Tag Warrior Importer plugin <= 0.2 - Cross-Site Request Forgery vulnerability