CVE-2022-40200: gVectors Team wpForo Forum (WordPress plugin), качване

Описание

Оригинално описание

Auth. (subscriber+) Arbitrary File Upload vulnerability in wpForo Forum plugin <= 2.0.9 on WordPress.

Засегнати продукти

• gVectors Team wpForo Forum (WordPress plugin): <= 2.0.9 до 2.0.9

Вид слабост

• CWE-434 Неограничено качване на файл от опасен тип

История

Други уязвимости в gVectors Team wpForo Forum (WordPress plugin)

• 7.1CVE-2022-40192
• 6.3CVE-2022-40206
• 5.4CVE-2022-40205
• 5.4CVE-2022-40632
• 8.8CVE-2022-38144

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-40200
• https://nvd.nist.gov/vuln/detail/CVE-2022-40200
• https://wordpress.org/plugins/wpforo/#developers
• https://patchstack.com/database/vulnerability/wpforo/wordpress-wpforo-forum-plugin-2-0-9-arbitrary-file-upload-vulnerability?_s_id=cve