CVE:CVE-2019-16251
CNNVD:CNNVD-201910-1900
WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。YIT Plugin Framework是使用在其中的一个YIT插件框架。
WordPress YIT Plugin Framework 3.3.8及之前版本中的plugin-fw/lib/yit-plugin-panel-wc.php文件存在安全漏洞。攻击者可利用该漏洞修改插件的选项。
solution:Upgrade yithemes yith_woocommerce_wishlist to a higher version than 2.2.13,and avoid the version (,2.2.13]; Upgrade yithemes yith_woocommerce_compare to a higher version than 2.3.13,and avoid the version (,2.3.13]; Upgrade yithemes yith_woocommerce_quick_view to a higher version than 1.3.13,and avoid the version (,1.3.13]; Upgrade yithemes yith_woocommerce_zoom_magnifier to a higher version than 1.3.11,and avoid the version (,1.3.11]; Upgrade yithemes yith_woocommerce_ajax_search to a higher version than 1.6.9,and avoid the version (,1.6.9]; Upgrade yithemes yith_woocommerce_badge_management to a higher version than 1.3.19,and avoid the version (,1.3.19]; Upgrade yithemes yith_woocommerce_brands_add-on to a higher version than 1.3.6,and avoid the version (,1.3.6]; Upgrade yithemes yith_woocommerce_request_a_quote to a higher version than 1.4.7,and avoid the version (,1.4.7]; Upgrade yithemes yith_woocommerce_social_login to a higher version than 1.3.4,and avoid the version (,1.3.4]; Upgrade yithemes yith_woocommerce_order_tracking to a higher version than 1.2.10,and avoid the version (,1.2.10]; Upgrade yithemes yith_woocommerce_pdf_invoice_and_shipping_list to a higher version than 1.2.12,and avoid the version (,1.2.12]; Upgrade yithemes yith_pre-order_for_woocommerce to a higher version than 1.1.9,and avoid the version (,1.1.9]; Upgrade yithemes yith_woocommerce_advanced_reviews to a higher version than 1.3.9,and avoid the version (,1.3.9]; Upgrade yithemes yith_woocommerce_product_add-ons to a higher version than 1.5.21,and avoid the version (,1.5.21]; Upgrade yithemes yith_woocommerce_gift_cards to a higher version than 1.3.7,and avoid the version (,1.3.7]; Upgrade yithemes yith_woocommerce_subscription to a higher version than 1.3.4,and avoid the version (,1.3.4]; Upgrade yithemes yith_woocommerce_affiliates to a higher version than 1.6.3,and avoid the version (,1.6.3]; Upgrade yithemes yith_woocommerce_cart_messages to a higher version than 1.4.3,and avoid the version (,1.4.3]; Upgrade yithemes yith_woocommerce_product_bundles to a higher version than 1.1.15,and avoid the version (,1.1.15]; Upgrade yithemes yith_woocommerce_frequently_bought_together to a higher version than 1.2.10,and avoid the version (,1.2.10]; Upgrade yithemes yith_woocommerce_multi-step_checkout to a higher version than 1.7.4,and avoid the version (,1.7.4]; Upgrade yithemes yith_color_and_label_variations_for_woocommerce to a higher version than 1.8.11,and avoid the version (,1.8.11]; Upgrade yithemes yith_custom_thank_you_page_for_woocommerce to a higher version than 1.1.6,and avoid the version (,1.1.6]; Upgrade yithemes yith_product_size_charts_for_woocommerce to a higher version than 1.1.1,and avoid the version (,1.1.1]; Upgrade yithemes yith_woocommerce_added_to_cart_popup to a higher version than 1.3.11,and avoid the version (,1.3.11]; Upgrade yithemes yith_woocommerce_bulk_product_editing to a higher version than 1.2.13,and avoid the version (,1.2.13]; Upgrade yithemes yith_woocommerce_stripe to a higher version than 2.0.1,and avoid the version (,2.0.1]; Upgrade yithemes yith_woocommerce_waiting_list to a higher version than 1.3.9,and avoid the version (,1.3.9]; Upgrade yithemes yith_woocommerce_points_and_rewards to a higher version than 1.3.4,and avoid the version (,1.3.4]; Upgrade yithemes yith_advanced_refund_system_for_woocommerce to a higher version than 1.0.10,and avoid the version (,1.0.10]; Upgrade yithemes yith_woocommerce_authorize.net_payment_gateway to a higher version than 1.1.12,and avoid the version (,1.1.12]; Upgrade yithemes yith_woocommerce_best_sellers to a higher version than 1.1.11,and avoid the version (,1.1.11]; Upgrade yithemes yith_woocommerce_mailchimp to a higher version than 2.1.3,and avoid the version (,2.1.3]; Upgrade yithemes yith_woocommerce_multi_vendor to a higher version than 3.4.0,and avoid the version (,3.4.0]; Upgrade yithemes yith_woocommerce_questions_and_answers to a higher version than 1.1.9,and avoid the version (,1.1.9]; Upgrade yithemes yith_woocommerce_recover_abandoned_cart to a higher version than 1.3.2,and avoid the version (,1.3.2]; Upgrade yithemes yith_paypal_express_checkout_for_woocommerce to a higher version than 1.2.5,and avoid the version (,1.2.5]; Upgrade yithemes yith_desktop_notifications_for_woocommerce to a higher version than 1.2.7,and avoid the version (,1.2.7]