WordPress Multiple Vulnerabilities
Last Update Date:
5 May 2015 09:55
Release Date:
5 May 2015
4028
Views
RISK: Medium Risk
TYPE: Servers - Internet App Servers
Multiple vulnerabilities have been identifed in WordPress, a weblog manager, that could allow remote attackers to upload files with invalid or unsafe names, mount social engineering attacks or compromise a site via cross-site scripting, and inject SQL commands.
Impact
- Cross-Site Scripting
- Remote Code Execution
System / Technologies affected
- Version 4.1.2 stable distribution prior
- Version 4.2.1 testing distribution prior
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Update to version 4.1.2 for the stable distribution (jessie)
- Update to version 4.2.1 for the testing distribution (stretch)
Vulnerability Identifier
Source
Related Link
Share with