WordPress 安全

WordPress eDS 響應式菜單插件 <= 1.2 - PHP 物件注入漏洞

WordPress Media Author Plugin <= 1.0.4 - Broken Access Control Vulnerability

WordPress atec Debug 插件 <= 1.2.22 - 經身份驗證的（管理員+）任意文件刪除漏洞

WordPress Make Connector 插件 <= 1.5.10 - 經身份驗證的（管理員+）任意文件上傳漏洞

WordPress Skyword API Plugin plugin <= 2.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

WordPress TablePress 插件 <= 3.2 - 經過身份驗證的 (貢獻者+) 通過 shortcode_debug 參數的存儲型跨站腳本漏洞

WordPress Ocean Extra plugin <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library Shortcode vulnerability

WordPress WooCommerce 插件 <= 7.2.4 - 未經身份驗證的雙擴展任意文件上傳漏洞

WordPress Slider Revolution plugin <= 6.7.36 - Authenticated (Contributor+) Arbitrary File Read via 'used_svg' and 'used_images' vulnerability

WordPress iATS 在線表單外掛 <= 1.2 - 經過身份驗證的 (貢獻者+) SQL 注入透過訂單參數漏洞