(CVE-2022-1442) Metform WordPress插件 action.php 访问控制不当漏洞

漏洞描述

PoC代码

暂无

相关漏洞推荐

• 西软云XMS /FoxhisFileServer/action 文件读取漏洞
• KINGOSOFT高校智慧校园教学综合服务平台 /jw/lessonchangeapply/jwComFileDownload.action 文件读取漏洞
• POC CVE-2017-14725: WordPress < 4.8.2 - Authenticated Open Redirect
• POC CVE-2017-17092: WordPress < 4.9.1 - Authenticated JavaScript File Upload
• POC wp-security-hidden-login-exposure: WordPress All-in-One Security <=4.4.1 - Hidden Login Page Exposure
• WordPress Kognetiks Chatbot for WordPress <= 2.0.0 任意文件上传漏洞
• WordPress Verbalize WP 存在任意文件上传漏洞（CVE-2024-49668）
• POC CVE-2021-4374: WordPress Automatic Plugin - Unauthenticated Options Change
• POC CVE-2025-11749: WordPress AI Engine Plugin - Token Exposure
• 通天星CMSV6车载定位监控平台 /edu_security_officer/disable;downloadLogger.action SQL 注入漏洞
• WordPress WooCommerce Designer Pro 插件 /wp-admin/admin-ajax.php wcdp_save_canvas_design_ajax 文件上传漏洞（CVE-2025-6440）
• POC CVE-2025-4302: Stop User Enumeration WordPress plugin - Authentication Bypass
• WordPress Google for WooCommerce /wp-content/plugins/google-listings-and-ads/vendor/googleads/google-ads-php/scripts/print_php_information.php 信息泄露漏洞（CVE-2024-10486）