WordPressの一覧に戻る

脆弱性の詳細

Go Fetch Jobs (for WP Job Manager) / Dynamic Copyright Year / Code Manager / Advanced Scrollbar – Custom Scrollbar Styling and Behavior / Goal Tracker – Custom Event Tracking for GA4 / Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Formin:ブラウザー上での不正な処理

WordPressCVE-2024-13362重要度:中悪用状況:未確認修正版:要確認

Go Fetch Jobs (for WP Job Manager) / Dynamic Copyright Year / Code Manager / Advanced Scrollbar – Custom Scrollbar Styling and Behavior / Goal Tracker – Custom Event Tracking for GA4 / Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminを使っている方が確認する情報です。公表文は「ブラウザー上での不正な処理」に関する問題を示しています。公開された対象範囲を下に日本語で示しています。

危険と対策

取得データを決まったルールで整理した条件と、製品ごとの確認手順です。 保存済みの詳しい解説がないため、取得できた条件と共通の確認手順を表示しています。

どんな危険?

問題の種類についての一般的な説明:攻撃者が用意した内容を表示した利用者のブラウザーで、不正なプログラムが動くおそれがあります。表示の書き換えや、利用者の権限を悪用する操作につながり得ます。

自分は対象?

対象の版
Go Fetch Jobs (for WP Job Manager):1.8.4.8.1以下Dynamic Copyright Year:1.0.4以下Code Manager:1.0.40以下Advanced Scrollbar – Custom Scrollbar Styling and Behavior:1.1.3以下Goal Tracker – Custom Event Tracking for GA4:1.1.5以下Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent:1.1.13以下WP Page Templates:1.1.16以下Payment Gateway for ACBA BANK:1.2.6以下Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress:1.2.7以下Forumax – AI Powered Advanced Community Forum Plugin:1.2.7以下Five-Star Ratings Shortcode:1.2.56以下Product Layouts for WooCommerce:1.3.1以下Meta Field Block – Display custom fields in the Block Editor without coding:1.3.3以下Custom WooCommerce Checkout Fields Editor:1.3.4以下Open User Map:1.4.0以下WP Notification Bell:1.4.2以下Remove Add to Cart WooCommerce:1.4.7以下File Manager for Google Drive – Integrate Google Drive:1.4.9以下Marijuana Age Verify:1.5.5以下RevivePress – Keep your Old Content Evergreen:1.5.8以下Restaurant & Cafe Addon for Elementor:1.5.8以下Send Users Email – Email Subscribers, Email Marketing Newsletter:1.5.10以下Unlimited Elements For Elementor:1.5.140以下Role Based Pricing for Woo by Meow Crew:1.6.0以下Primary Addon for Elementor:1.6.0以下Featured Images in RSS for Mailchimp & More:1.6.3以下Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI:1.6.3以下Message Filter for Contact Form 7:1.6.3.2以下Embedder for Google Reviews:1.6.6以下MapGeo – Interactive Geo Maps:1.6.22以下WPBITS Addons For Elementor Page Builder:1.7以下Widgets on Pages:1.7以下Spotlight Social Feeds – Block, Shortcode, and Widget:1.7.0以下WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms:1.7.0以下AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o:1.7.2以下Text To Speech TTS Accessibility:1.7.34以下Easy Age Verify:1.8.5以下AI Puffer – Chat. Create. Automate. (formerly AI Power):1.8.99以下Justified Gallery:1.9.0以下Mapster WP Maps:1.9.0以下StreamWeasels Twitch Integration:1.9.2以下XT Variation Swatches for WooCommerce:1.9.4以下bBlocks – Essential Gutenberg Blocks & Patterns Collection:1.9.8以下URL Shortify – Simple and Easy URL Shortener:1.10.4以下Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce:1.10.6以下Geo Mashup:1.13.15以下Disable Payment Methods based on cart conditions for WooCommerce:1.16.3以下Automatic Internal Links for SEO by Pagup:2.0.0以下Full Screen Background:2.0.2以下Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits:2.0.7.2以下Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player:2.0.82以下Carousel, Recent Post Slider and Banner Slider:2.1以下Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO):2.1.0以下XT Quick View for WooCommerce:2.1.5以下Smart phone field for Gravity Forms:2.1.6以下Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar:2.1.34以下PDF Poster – Display PDF Files with Custom Viewer:2.2.0以下Events Addon for Elementor:2.2.2以下HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player:2.2.27以下Glossary:2.2.38以下Restrict – membership, site, content and user access restrictions for WordPress:2.3.0以下Custom PHP Settings:2.3.1以下WP Meta and Date Remover:2.3.4以下Anti-Spam Protection – No API Key, GDPR Friendly:2.3.7以下Premmerce Permalink Manager for WooCommerce:2.3.11以下Music Player for Elementor – Audio Player & Podcast Player:2.4.1以下TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More:2.4.1以下Ocean Extra:2.4.2以下Gallery by FooGallery:2.4.27以下Automatic YouTube Gallery:2.5.5以下EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder:2.5.7以下Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More:2.5.8以下Radio Station by netmix® – Manage and play your Show Schedule in WordPress!:2.5.9以下StoreCustomizer – A plugin to Customize all WooCommerce Pages:2.5.9以下Joli Table Of Contents:2.6.0以下GA4WP – Analytics Dashboard for the Website:2.6.0以下Place Order Without Payment for WooCommerce:2.6.5以下Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages:2.6.7以下Share This Image:2.07以下Inavii Social Feed:2.7.0以下Lightbox & Modal Popup WordPress Plugin – FooBox:2.7.33以下XT Floating Cart for WooCommerce:2.8.4以下WP Mobile Menu – The Mobile-Friendly Responsive Menu:2.8.6以下AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization:2.9.2以下Independent Analytics:2.9.7以下Knowledge Base documentation & wiki plugin – BasePress Docs:2.16.3.3以下Internal Link Juicer: SEO Auto Linker for WordPress:2.24.6以下Bulk Edit Posts and Products in Spreadsheet:2.25.16以下Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App:3.0.0以下TablePress – Tables in WordPress made easy:3.0.2以下Ultimeter:3.0.5以下TreePress – Easy Family Trees & Ancestor Profiles:3.0.6以下Pay For Post with WooCommerce:3.1.26以下Post to Google My Business (Google Business Profile):3.1.28以下WP Coupons and Deals – Coupon Plugin For Affiliate Marketers:3.2.2以下Advanced Classifieds & Directory Pro:3.2.4以下Mixed Media Gallery Blocks:3.2.4.4以下BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor:3.2.6以下AidWP – Donation & Payment Forms (Stripe Powered):3.2.6以下Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid:3.2.7以下Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider:3.2.7以下Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews:3.2.8以下Team Members Showcase:3.3.0以下EleSpare – News, Magazine and Blog Addons for Elementor:3.3.2以下Post List Designer – Category Post, Recent Post, Post List:3.3.7以下Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News:3.4.9以下YASR – Yet Another Star Rating Plugin for WordPress:3.4.12以下WPIDE – File Manager & Code Editor:3.5.1以下Premmerce Product Filter for WooCommerce:3.7.3以下WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars:3.8.3以下Delete Posts automatically:3.9.6以下Menu Image, Icons made easy:3.12以下AWCA – The Great Analytics Insights for Your eStore:3.12.0以下Announcement & Notification Banner – Bulletin:3.12.1以下Thank You Page for WooCommerce:4.2.0以下Contact Form 7 Multi-Step Forms:4.4.1以下Auto-Install Free SSL – Generate & Install Free SSL Certificates:4.5.0以下WP Books Gallery – Build Stunning Book Showcases & Libraries in Minutes:4.6.8以下Easy Appointment Booking & Scheduling System – Webba Booking Calendar:5.0.57以下WP fail2ban – Advanced Security:5.3.4以下Ivory Search – WordPress Search Plugin:5.5.8以下WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards:5.5.31以下Coupon Affiliates – Affiliate Plugin for WooCommerce:5.17.2以下Security Ninja – WordPress Security & Firewall:5.222以下Checkout with Cash App on WooCommerce:6.0.2以下Display Eventbrite Events:6.1.10以下Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins:6.1.13以下Easy Social Feed – Social Photos Gallery and Post Feed for WordPress:6.6.5以下WP Shortcodes Plugin — Shortcodes Ultimate:7.3.3以下WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan:7.7.0以下WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto:8.0.7以下
修正版
このデータでは未確認。更新が提供されていない、という意味ではありません。

どうすればいい?

  1. 「CVE-2024-13362」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。

    一般的な作業手順根拠 1根拠 2根拠 3根拠 4根拠 5根拠 6根拠 7根拠 8根拠 9根拠 10根拠 11根拠 12根拠 13
  2. ファイルとデータベースのバックアップを取り、管理画面の「ダッシュボード」→「更新」で該当する本体・プラグイン・テーマの更新を実行します。更新が表示されない有料製品などは、購入先・開発元の正規の配布経路を利用してください。

    一般的な作業手順根拠 18根拠 19根拠 20

使っているバージョンの調べ方

  1. 「Go Fetch Jobs (for WP Job Manager) / Dynamic Copyright Year / Code Manager / Advanced Scrollbar – Custom Scrollbar Styling and Behavior / Goal Tracker – Custom Event Tracking for GA4 / Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Formin」が本体・プラグイン・テーマのどれかを確認します。管理画面の「プラグイン」と「外観」→「テーマ」で製品名・開発元を照合し、本体の番号は「ツール」→「サイトヘルス」→「情報」で確認してください。

    一般的な作業手順根拠 15根拠 16根拠 17
  2. 管理画面に入れない、または同じ名前の製品を判別できない場合は、下の問い合わせ文をサイトの制作会社・管理担当者に送ってください。名前が見つからないという理由だけで、安全とは判定しないでください。

    一般的な作業手順根拠 17根拠 15

すぐに更新できないとき

対応が終わったら確認すること

  1. 更新後に同じ管理画面を開き直してバージョンを記録します。修正対象の系列・版と一致するかを照合し、サイト表示、ログイン、フォームや購入など普段使う主要な操作も確認してください。更新ボタンを押しただけでは完了としないでください。

    一般的な作業手順根拠 18根拠 19

まだ分からないこと・判断の限界

  • 取り込んだ公開データには、修正済みと明記されたバージョン番号がありません。「修正されていない」と確定したわけではありません。下の問い合わせ文で、修正版の番号・提供場所・適用予定を確認できます。
  • AIによる全文翻訳は行っていません。公式の構造化データを決まったルールで日本語表示し、製品ごとの一般的な確認・更新手順を補足しています。本文だけに記された対象条件や例外は、併記した原文・根拠と照合してください。
  • 取得した公式資料に省略があります。このページの範囲だけで対象外または修正済みとは判断しないでください。

管理会社・担当者に聞くための確認メモ

自分で操作できない場合に使えます。コピー先で空欄を埋めて担当者へ送ってください。

この解説・手順の根拠

  1. NVDの原文
  2. security@wordfence.com
  3. security@wordfence.com
  4. security@wordfence.com
  5. security@wordfence.com
  6. security@wordfence.com
  7. security@wordfence.com
  8. security@wordfence.com
  9. security@wordfence.com
  10. security@wordfence.com
  11. security@wordfence.com
  12. security@wordfence.com
  13. security@wordfence.com
  14. FIRST公式:CVSS 3.1の条件の定義
  15. WordPress公式:プラグイン一覧
  16. WordPress公式:テーマの確認
  17. WordPress公式:サイトヘルスの情報
  18. WordPress公式:本体の更新
  19. WordPress公式:更新画面
  20. WordPress公式:プラグインの確認と更新
  21. 公式記録の識別番号

説明に対応する原文の抜粋

日本語の説明の根拠になった、取得済みの公式情報です。各抜粋を開くと、出典と元の文章を確認できます。

  1. 抜粋 1:www.cve.org
    Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
    この抜粋の出典を開く

    取得元の項目:/originalText / 言語:und

  2. 抜粋 2:www.cve.org
    [{"product":"Go Fetch Jobs (for WP Job Manager)","range":"<= 1.8.4.8.1"},{"product":"Dynamic Copyright Year","range":"<= 1.0.4"},{"product":"Code Manager","range":"<= 1.0.40"},{"product":"Advanced Scrollbar – Custom Scrollbar Styling and Behavior","range":"<= 1.1.3"},{"product":"Goal Tracker – Custom Event Tracking for GA4","range":"<= 1.1.5"},{"product":"Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent","range":"<= 1.1.13"},{"product":"WP Page Templates","range":"<= 1.1.16"},{"product":"Payment Gateway for ACBA BANK","range":"<= 1.2.6"},{"product":"Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress","range":"<= 1.2.7"},{"product":"Forumax – AI Powered Advanced Community Forum Plugin","range":"<= 1.2.7"},{"product":"Five-Star Ratings Shortcode","range":"<= 1.2.56"},{"product":"Product Layouts for WooCommerce","range":"<= 1.3.1"},{"product":"Meta Field Block – Display custom fields in the Block Editor without coding","range":"<= 1.3.3"},{"product":"Custom WooCommerce Checkout Fields Editor","range":"<= 1.3.4"},{"product":"Open User Map","range":"<= 1.4.0"},{"product":"WP Notification Bell","range":"<= 1.4.2"},{"product":"Remove Add to Cart WooCommerce","range":"<= 1.4.7"},{"product":"File Manager for Google Drive – Integrate Google Drive","range":"<= 1.4.9"},{"product":"Marijuana Age Verify","range":"<= 1.5.5"},{"product":"RevivePress – Keep your Old Content Evergreen","range":"<= 1.5.8"},{"product":"Restaurant & Cafe Addon for Elementor","range":"<= 1.5.8"},{"product":"Send Users Email – Email Subscribers, Email Marketing Newsletter","range":"<= 1.5.10"},{"product":"Unlimited Elements For Elementor","range":"<= 1.5.140"},{"product":"Role Based Pricing for Woo by Meow Crew","range":"<= 1.6.0"},{"product":"Primary Addon for Elementor","range":"<= 1.6.0"},{"product":"Featured Images in RSS for Mailchimp & More","range":"<= 1.6.3"},{"product":"Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI","range":"<= 1.6.3"},{"product":"Message Filter for Contact Form 7","range":"<= 1.6.3.2"},{"product":"Embedder for Google Reviews","range":"<= 1.6.6"},{"product":"MapGeo – Interactive Geo Maps","range":"<= 1.6.22"},{"product":"WPBITS Addons For Elementor Page Builder","range":"<= 1.7"},{"product":"Widgets on Pages","range":"<= 1.7"},{"product":"Spotlight Social Feeds – Block, Shortcode, and Widget","range":"<= 1.7.0"},{"product":"WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms","range":"<= 1.7.0"},{"product":"AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o","range":"<= 1.7.2"},{"product":"Text To Speech TTS Accessibility","range":"<= 1.7.34"},{"product":"Easy Age Verify","range":"<= 1.8.5"},{"product":"AI Puffer – Chat. Create. Automate. (formerly AI Power)","range":"<= 1.8.99"},{"product":"Justified Gallery","range":"<= 1.9.0"},{"product":"Mapster WP Maps","range":"<= 1.9.0"},{"product":"StreamWeasels Twitch Integration","range":"<= 1.9.2"},{"product":"XT Variation Swatches for WooCommerce","range":"<= 1.9.4"},{"product":"bBlocks – Essential Gutenberg Blocks & Patterns Collection","range":"<= 1.9.8"},{"product":"URL Shortify – Simple and Easy URL Shortener","range":"<= 1.10.4"},{"product":"Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce","range":"<= 1.10.6"},{"product":"Geo Mashup","range":"<= 1.13.15"},{"product":"Disable Payment Methods based on cart conditions for WooCommerce","range":"<= 1.16.3"},{"product":"Automatic Internal Links for SEO by Pagup","range":"<= 2.0.0"},{"product":"Full Screen Background","range":"<= 2.0.2"},{"product":"Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits","range":"<= 2.0.7.2"},{"product":"Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player","range":"<= 2.0.82"},{"product":"Carousel, Recent Post Slider and Banner Slider","range":"<= 2.1"},{"product":"Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO)","range":"<= 2.1.0"},{"product":"XT Quick View for WooCommerce","range":"<= 2.1.5"},{"product":"Smart phone field for Gravity Forms","range":"<= 2.1.6"},{"product":"Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar","range":"<= 2.1.34"},{"product":"PDF Poster – Display PDF Files with Custom Viewer","range":"<= 2.2.0"},{"product":"Events Addon for Elementor","range":"<= 2.2.2"},{"product":"HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player","range":"<= 2.2.27"},{"product":"Glossary","range":"<= 2.2.38"},{"product":"Restrict – membership, site, content and user access restrictions for WordPress","range":"<= 2.3.0"},{"product":"Custom PHP Settings","range":"<= 2.3.1"},{"product":"WP Meta and Date Remover","range":"<= 2.3.4"},{"product":"Anti-Spam Protection – No API Key, GDPR Friendly","range":"<= 2.3.7"},{"product":"Premmerce Permalink Manager for WooCommerce","range":"<= 2.3.11"},{"product":"Music Player for Elementor – Audio Player & Podcast Player","range":"<= 2.4.1"},{"product":"TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More","range":"<= 2.4.1"},{"product":"Ocean Extra","range":"<= 2.4.2"},{"product":"Gallery by FooGallery","range":"<= 2.4.27"},{"product":"Automatic YouTube Gallery","range":"<= 2.5.5"},{"product":"EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder","range":"<= 2.5.7"},{"product":"Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More","range":"<= 2.5.8"},{"product":"Radio Station by netmix® – Manage and play your Show Schedule in WordPress!","range":"<= 2.5.9"},{"product":"StoreCustomizer – A plugin to Customize all WooCommerce Pages","range":"<= 2.5.9"},{"product":"Joli Table Of Contents","range":"<= 2.6.0"},{"product":"GA4WP – Analytics Dashboard for the Website","range":"<= 2.6.0"},{"product":"Place Order Without Payment for WooCommerce","range":"<= 2.6.5"},{"product":"Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages","range":"<= 2.6.7"},{"product":"Share This Image","range":"<= 2.07"},{"product":"Inavii Social Feed","range":"<= 2.7.0"},{"product":"Lightbox & Modal Popup WordPress Plugin – FooBox","range":"<= 2.7.33"},{"product":"XT Floating Cart for WooCommerce","range":"<= 2.8.4"},{"product":"WP Mobile Menu – The Mobile-Friendly Responsive Menu","range":"<= 2.8.6"},{"product":"AEH Speed Optimization: Browser Cache, Optimized Minify, Lazy Loading & Image Optimization","range":"<= 2.9.2"},{"product":"Independent Analytics","range":"<= 2.9.7"},{"product":"Knowledge Base documentation & wiki plugin – BasePress Docs","range":"<= 2.16.3.3"},{"product":"Internal Link Juicer: SEO Auto Linker for WordPress","range":"<= 2.24.6"},{"product":"Bulk Edit Posts and Products in Spreadsheet","range":"<= 2.25.16"},{"product":"Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App","range":"<= 3.0.0"},{"product":"TablePress – Tables in WordPress made easy","range":"<= 3.0.2"},{"product":"Ultimeter","range":"<= 3.0.5"},{"product":"TreePress – Easy Family Trees & Ancestor Profiles","range":"<= 3.0.6"},{"product":"Pay For Post with WooCommerce","range":"<= 3.1.26"},{"product":"Post to Google My Business (Google Business Profile)","range":"<= 3.1.28"},{"product":"WP Coupons and Deals – Coupon Plugin For Affiliate Marketers","range":"<= 3.2.2"},{"product":"Advanced Classifieds & Directory Pro","range":"<= 3.2.4"},{"product":"Mixed Media Gallery Blocks","range":"<= 3.2.4.4"},{"product":"BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor","range":"<= 3.2.6"},{"product":"AidWP – Donation & Payment Forms (Stripe Powered)","range":"<= 3.2.6"},{"product":"Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid","range":"<= 3.2.7"},{"product":"Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider","range":"<= 3.2.7"},{"product":"Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews","range":"<= 3.2.8"},{"product":"Team Members Showcase","range":"<= 3.3.0"},{"product":"EleSpare – News, Magazine and Blog Addons for Elementor","range":"<= 3.3.2"},{"product":"Post List Designer – Category Post, Recent Post, Post List","range":"<= 3.3.7"},{"product":"Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News","range":"<= 3.4.9"},{"product":"YASR – Yet Another Star Rating Plugin for WordPress","range":"<= 3.4.12"},{"product":"WPIDE – File Manager & Code Editor","range":"<= 3.5.1"},{"product":"Premmerce Product Filter for WooCommerce","range":"<= 3.7.3"},{"product":"WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars","range":"<= 3.8.3"},{"product":"Delete Posts automatically","range":"<= 3.9.6"},{"product":"Menu Image, Icons made easy","range":"<= 3.12"},{"product":"AWCA – The Great Analytics Insights for Your eStore","range":"<= 3.12.0"},{"product":"Announcement & Notification Banner – Bulletin","range":"<= 3.12.1"},{"product":"Thank You Page for WooCommerce","range":"<= 4.2.0"},{"product":"Contact Form 7 Multi-Step Forms","range":"<= 4.4.1"},{"product":"Auto-Install Free SSL – Generate & Install Free SSL Certificates","range":"<= 4.5.0"},{"product":"WP Books Gallery – Build Stunning Book Showcases & Libraries in Minutes","range":"<= 4.6.8"},{"product":"Easy Appointment Booking & Scheduling System – Webba Booking Calendar","range":"<= 5.0.57"},{"product":"WP fail2ban – Advanced Security","range":"<= 5.3.4"},{"product":"Ivory Search – WordPress Search Plugin","range":"<= 5.5.8"},{"product":"WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards","range":"<= 5.5.31"},{"product":"Coupon Affiliates – Affiliate Plugin for WooCommerce","range":"<= 5.17.2"},{"product":"Security Ninja – WordPress Security & Firewall","range":"<= 5.222"},{"product":"Checkout with Cash App on WooCommerce","range":"<= 6.0.2"},{"product":"Display Eventbrite Events","range":"<= 6.1.10"},{"product":"Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins","range":"<= 6.1.13"},{"product":"Easy Social Feed – Social Photos Gallery and Post Feed for WordPress","range":"<= 6.6.5"},{"product":"WP Shortcodes Plugin — Shortcodes Ultimate","range":"<= 7.3.3"},{"product":"WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan","range":"<= 7.7.0"},{"product":"WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto","range":"<= 8.0.7"}]
    この抜粋の出典を開く

    取得元の項目:/affected / 言語:und

  3. 抜粋 3:www.cve.org
    [{"vendor":"sebet","product":"Go Fetch Jobs (for WP Job Manager)","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.8.4.8.1","versionType":"semver","status":"affected"}]},{"vendor":"5starplugins","product":"Dynamic Copyright Year","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.0.4","versionType":"semver","status":"affected"}]},{"vendor":"peterschulznl","product":"Code Manager","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.0.40","versionType":"semver","status":"affected"}]},{"vendor":"bplugins","product":"Advanced Scrollbar – Custom Scrollbar Styling and Behavior","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.1.3","versionType":"semver","status":"affected"}]},{"vendor":"yuvalo","product":"Goal Tracker – Custom Event Tracking for GA4","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.1.5","versionType":"semver","status":"affected"}]},{"vendor":"essekia","product":"Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.1.13","versionType":"semver","status":"affected"}]},{"vendor":"josevega","product":"WP Page Templates","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.1.16","versionType":"semver","status":"affected"}]},{"vendor":"hkdigitalagency","product":"Payment Gateway for ACBA BANK","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.2.6","versionType":"semver","status":"affected"}]},{"vendor":"princeahmed","product":"Dracula Dark Mode – Accessibility, Reading Mode & Dark Mode for WordPress","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.2.7","versionType":"semver","status":"affected"}]},{"vendor":"spiderdevs","product":"Forumax – AI Powered Advanced Community Forum Plugin","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.2.7","versionType":"semver","status":"affected"}]},{"vendor":"seezee","product":"Five-Star Ratings Shortcode","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.2.56","versionType":"semver","status":"affected"}]},{"vendor":"oxilab","product":"Product Layouts for WooCommerce","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.3.1","versionType":"semver","status":"affected"}]},{"vendor":"mr2p","product":"Meta Field Block – Display custom fields in the Block Editor without coding","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.3.3","versionType":"semver","status":"affected"}]},{"vendor":"themelocation","product":"Custom WooCommerce Checkout Fields Editor","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.3.4","versionType":"semver","status":"affected"}]},{"vendor":"100plugins","product":"Open User Map","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.4.0","versionType":"semver","status":"affected"}]},{"vendor":"wpdever","product":"WP Notification Bell","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.4.2","versionType":"semver","status":"affected"}]},{"vendor":"themelocation","product":"Remove Add to Cart WooCommerce","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.4.7","versionType":"semver","status":"affected"}]},{"vendor":"princeahmed","product":"File Manager for Google Drive – Integrate Google Drive","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.4.9","versionType":"semver","status":"affected"}]},{"vendor":"5starplugins","product":"Marijuana Age Verify","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.5.5","versionType":"semver","status":"affected"}]},{"vendor":"infosatech","product":"RevivePress – Keep your Old Content Evergreen","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.5.8","versionType":"semver","status":"affected"}]},{"vendor":"nicheaddons","product":"Restaurant & Cafe Addon for Elementor","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.5.8","versionType":"semver","status":"affected"}]},{"vendor":"paretodigital","product":"Send Users Email – Email Subscribers, Email Marketing Newsletter","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.5.10","versionType":"semver","status":"affected"}]},{"vendor":"unitecms","product":"Unlimited Elements For Elementor","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.5.140","versionType":"semver","status":"affected"}]},{"vendor":"meowcrew","product":"Role Based Pricing for Woo by Meow Crew","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.6.0","versionType":"semver","status":"affected"}]},{"vendor":"nicheaddons","product":"Primary Addon for Elementor","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.6.0","versionType":"semver","status":"affected"}]},{"vendor":"5starplugins","product":"Featured Images in RSS for Mailchimp & More","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.6.3","versionType":"semver","status":"affected"}]},{"vendor":"wpsaad","product":"Image Alt Text Manager – Bulk & Dynamic Alt Tags For image SEO Optimization + AI","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.6.3","versionType":"semver","status":"affected"}]},{"vendor":"kofimokome","product":"Message Filter for Contact Form 7","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.6.3.2","versionType":"semver","status":"affected"}]},{"vendor":"paretodigital","product":"Embedder for Google Reviews","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.6.6","versionType":"semver","status":"affected"}]},{"vendor":"interactivegeomaps","product":"MapGeo – Interactive Geo Maps","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.6.22","versionType":"semver","status":"affected"}]},{"vendor":"wpbits","product":"WPBITS Addons For Elementor Page Builder","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.7","versionType":"semver","status":"affected"}]},{"vendor":"toddhalfpenny","product":"Widgets on Pages","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.7","versionType":"semver","status":"affected"}]},{"vendor":"rebelcode","product":"Spotlight Social Feeds – Block, Shortcode, and Widget","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.7.0","versionType":"semver","status":"affected"}]},{"vendor":"tobias_conrad","product":"WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.7.0","versionType":"semver","status":"affected"}]},{"vendor":"webfactory","product":"AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.7.2","versionType":"semver","status":"affected"}]},{"vendor":"hasanazizul","product":"Text To Speech TTS Accessibility","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.7.34","versionType":"semver","status":"affected"}]},{"vendor":"5starplugins","product":"Easy Age Verify","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.8.5","versionType":"semver","status":"affected"}]},{"vendor":"senols","product":"AI Puffer – Chat. Create. Automate. (formerly AI Power)","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.8.99","versionType":"semver","status":"affected"}]},{"vendor":"damian-gora","product":"Justified Gallery","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.9.0","versionType":"semver","status":"affected"}]},{"vendor":"mapster","product":"Mapster WP Maps","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.9.0","versionType":"semver","status":"affected"}]},{"vendor":"streamweasels","product":"StreamWeasels Twitch Integration","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.9.2","versionType":"semver","status":"affected"}]},{"vendor":"xplodedthemes","product":"XT Variation Swatches for WooCommerce","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.9.4","versionType":"semver","status":"affected"}]},{"vendor":"bplugins","product":"bBlocks – Essential Gutenberg Blocks & Patterns Collection","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.9.8","versionType":"semver","status":"affected"}]},{"vendor":"kaizencoders","product":"URL Shortify – Simple and Easy URL Shortener","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.10.4","versionType":"semver","status":"affected"}]},{"vendor":"uriahs-victor","product":"Kikote – Location Picker at Checkout & Google Address AutoFill Plugin for WooCommerce","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.10.6","versionType":"semver","status":"affected"}]},{"vendor":"cyberhobo","product":"Geo Mashup","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.13.15","versionType":"semver","status":"affected"}]},{"vendor":"josevega","product":"Disable Payment Methods based on cart conditions for WooCommerce","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"1.16.3","versionType":"semver","status":"affected"}]},{"vendor":"pagup","product":"Automatic Internal Links for SEO by Pagup","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.0.0","versionType":"semver","status":"affected"}]},{"vendor":"enweby","product":"Full Screen Background","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.0.2","versionType":"semver","status":"affected"}]},{"vendor":"litonice13","product":"Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.0.7.2","versionType":"semver","status":"affected"}]},{"vendor":"princeahmed","product":"Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.0.82","versionType":"semver","status":"affected"}]},{"vendor":"spicethemes","product":"Carousel, Recent Post Slider and Banner Slider","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.1","versionType":"semver","status":"affected"}]},{"vendor":"pagup","product":"Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO)","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.1.0","versionType":"semver","status":"affected"}]},{"vendor":"xplodedthemes","product":"XT Quick View for WooCommerce","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.1.5","versionType":"semver","status":"affected"}]},{"vendor":"pluginscafe","product":"Smart phone field for Gravity Forms","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.1.6","versionType":"semver","status":"affected"}]},{"vendor":"fooplugins","product":"Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.1.34","versionType":"semver","status":"affected"}]},{"vendor":"bplugins","product":"PDF Poster – Display PDF Files with Custom Viewer","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.2.0","versionType":"semver","status":"affected"}]},{"vendor":"nicheaddons","product":"Events Addon for Elementor","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.2.2","versionType":"semver","status":"affected"}]},{"vendor":"bplugins","product":"HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.2.27","versionType":"semver","status":"affected"}]},{"vendor":"mte90","product":"Glossary","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.2.38","versionType":"semver","status":"affected"}]},{"vendor":"tickera","product":"Restrict – membership, site, content and user access restrictions for WordPress","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.3.0","versionType":"semver","status":"affected"}]},{"vendor":"cyclonecode","product":"Custom PHP Settings","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.3.1","versionType":"semver","status":"affected"}]},{"vendor":"prasadkirpekar","product":"WP Meta and Date Remover","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.3.4","versionType":"semver","status":"affected"}]},{"vendor":"fullworks","product":"Anti-Spam Protection – No API Key, GDPR Friendly","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.3.7","versionType":"semver","status":"affected"}]},{"vendor":"premmerce","product":"Premmerce Permalink Manager for WooCommerce","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.3.11","versionType":"semver","status":"affected"}]},{"vendor":"smartwpress","product":"Music Player for Elementor – Audio Player & Podcast Player","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.4.1","versionType":"semver","status":"affected"}]},{"vendor":"mhmrajib","product":"TopNewsWp – Display Tikcer News, RSS Feed Widget and Many More","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.4.1","versionType":"semver","status":"affected"}]},{"vendor":"oceanwp","product":"Ocean Extra","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.4.2","versionType":"semver","status":"affected"}]},{"vendor":"fooplugins","product":"Gallery by FooGallery","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.4.27","versionType":"semver","status":"affected"}]},{"vendor":"plugins360","product":"Automatic YouTube Gallery","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.5.5","versionType":"semver","status":"affected"}]},{"vendor":"spiderdevs","product":"EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.5.7","versionType":"semver","status":"affected"}]},{"vendor":"samdani","product":"Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.5.8","versionType":"semver","status":"affected"}]},{"vendor":"tonyzeoli","product":"Radio Station by netmix® – Manage and play your Show Schedule in WordPress!","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.5.9","versionType":"semver","status":"affected"}]},{"vendor":"kaira","product":"StoreCustomizer – A plugin to Customize all WooCommerce Pages","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.5.9","versionType":"semver","status":"affected"}]},{"vendor":"wpjoli","product":"Joli Table Of Contents","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.6.0","versionType":"semver","status":"affected"}]},{"vendor":"passionatebrains","product":"GA4WP – Analytics Dashboard for the Website","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.6.0","versionType":"semver","status":"affected"}]},{"vendor":"nitin247","product":"Place Order Without Payment for WooCommerce","defaultStatus":"unaffected","versions":[{"version":"0","lessThanOrEqual":"2.6.5","versionType":"semver","status":"affected"}]},{"vendor":"wordplus","product":"Better Messages – Live Cha
    この抜粋の出典を開く

    取得元の項目:/affectedDetails / 言語:und

  4. 抜粋 4:www.cve.org
    CVE-2024-13362
    この抜粋の出典を開く

    取得元の項目:/recordId / 言語:und

悪用状況の「未確認」は、悪用されていないことを意味しません。対策は製品・バージョン・利用条件によって異なります。適用前に情報源とご自身の環境を確認してください。

情報の出典と更新日時

CVSS評価元:security@wordfence.com。重要度は技術的な深刻度の目安であり、対応の順序は悪用状況や利用環境も含めて判断してください。

情報源ごとの取得日時

原典の更新日時と当サイトの取得日時は、情報源ごとに異なります。上の更新・取得日時は、それぞれの最新値です。

  • NVD原典の更新:2026/10/28 03:10 JST取得:2026/10/30 04:12 JST
原文と条件を確認

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

この情報をAIに渡す

この1件の対象・リスク・対策・出典を取得

JSONを見る

このサービスを共有

脆弱性を確認する入口を、チームや知り合いに。

Xで共有