ExpressTech Responsive Menu Pro güvenlik açıkları (CVE)

ExpressTech Responsive Menu Pro için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç
Puansız
CVE-2021-24162

Responsive Menu < 4.0.4 - CSRF to Settings Update

ExpressTech Responsive Menu – Create Mobile-Friendly Menu; ExpressTech Responsive Menu Pro

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into importing all new settings. These settings could be modified to include malicious JavaScript, therefore allowing an attacker t…

Puansız
CVE-2021-24161

Responsive Menu < 4.0.4 - CSRF to Arbitrary File Upload

ExpressTech Responsive Menu – Create Mobile-Friendly Menu; ExpressTech Responsive Menu Pro

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive containing malicious PHP files. The attacker could then access those files to achieve remote code exec…

1.2%EPSS
Puansız
CVE-2021-24160

Responsive Menu 4.0.0 - 4.0.3 - Authenticated Arbitrary File Upload

ExpressTech Responsive Menu – Create Mobile-Friendly Menu; ExpressTech Responsive Menu Pro

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the /rmp-menu/ directory. These files could then be accessed via the front end of the site to…

8.2%EPSS