CVE:CVE-2021-4337
CNNVD:CNNVD-202306-544
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。
WordPress Plugin Sixteen XforWooCommerce Add-On Plugins 存在安全漏洞，该漏洞源于缺少对 wp_ajax_svx_ajax_factory 函数的功能检查，因此容易受到授权绕过的影响。
solution:Upgrade xforwoocommerce add_product_tabs to a higher version than 1.5.0,and avoid the version (,1.5.0); Upgrade xforwoocommerce autopilot_seo to a higher version than 1.6.0,and avoid the version (,1.6.0); Upgrade xforwoocommerce bulk_add_to_cart to a higher version than 1.3.0,and avoid the version (,1.3.0); Upgrade xforwoocommerce comment_and_review_spam_control to a higher version than 1.5.0,and avoid the version (,1.5.0); Upgrade xforwoocommerce floating_cart to a higher version than 1.3.0,and avoid the version (,1.3.0); Upgrade xforwoocommerce improved_product_options to a higher version than 5.3.0,and avoid the version (,5.3.0); Upgrade xforwoocommerce improved_sale_badges to a higher version than 4.4.0,and avoid the version (,4.4.0); Upgrade xforwoocommerce live_product_editor to a higher version than 4.7.0,and avoid the version (,4.7.0); Upgrade xforwoocommerce live_search to a higher version than 2.1.0,and avoid the version (,2.1.0); Upgrade xforwoocommerce package_quantity to a higher version than 1.2.0,and avoid the version (,1.2.0); Upgrade xforwoocommerce price_commander to a higher version than 1.3.0,and avoid the version (,1.3.0); Upgrade xforwoocommerce product_filter to a higher version than 8.2.0,and avoid the version (,8.2.0); Upgrade xforwoocommerce product_loops to a higher version than 1.7.0,and avoid the version (,1.7.0); Upgrade xforwoocommerce share,_print_and_pdf_products to a higher version than 2.8.0,and avoid the version (,2.8.0); Upgrade xforwoocommerce warranties_and_returns to a higher version than 5.3.0,and avoid the version (,5.3.0); Upgrade xforwoocommerce xforwoocommerce to a higher version than 1.7.0,and avoid the version (,1.7.0)