WordPress Multiple Vulnerabilities

Last Update Date: 7 Aug 2015 Release Date: 6 Aug 2015 3699 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities have been identified in WordPress, which can be exploited by remote attackers to conduct cross site script and SQL injection attack.

Impact

Cross-Site Scripting

System / Technologies affected

Versions prior to 4.2.4

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix (4.2.4).

Vulnerability Identifier

CVE-2015-2213
CVE-2015-5730
CVE-2015-5731
CVE-2015-5732
CVE-2015-5733
CVE-2015-5734

Source

CERT/CC