你即將離開本站

並前往https://blog.sonarsource.com/woocommerce-csrf-to-stored-xss

WooCommerce 3.6.4 - CSRF Bypass to Stored XSS

In line 202 the nonce check of the check_ajax_referer() function is bypassed via the self-created nonce described above.

確定！ 回上一頁

查詢 「Check_ajax_referer」的人也找了：

  1. Check_ajax_referer
    2.
  2. Wp_verify_nonce
    3.
  3. Wp_insert_post
    4.
  4. Wp_send_json_success
    5.
  5. Wp_doing_ajax
    6.
  6. Wp_create_nonce
    7.
  7. _Wpnonce
    8.
  8. WordPress AJAX
    9.