WordPress Multiple Vulnerabilities

Last Update Date: 19 Aug 2016 Release Date: 23 Jun 2016 3746 Views

RISK: High Risk

TYPE: Servers - Internet App Servers

Multiple vulnerabilities have been identified in WordPress. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system.

Impact

Remote Code Execution

System / Technologies affected

4.5.2 and prior versions

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix (WordPress 4.5.3).

Vulnerability Identifier

CVE-2016-5832
CVE-2016-5834
CVE-2016-5835
CVE-2016-5837
CVE-2016-5838
CVE-2016-5839

Source

US-CERT