WordPress 5.2.x < 5.2.6 Multiple Vulnerabilities

🗓️ 18 May 2020 00:00:00Reported by This script is Copyright (C) 2020-2026 and is owned by Tenable, Inc. or an Affiliate thereof.Type

nessus

nessus🔗 www.tenable.com👁 16 Views

WordPress 5.2.x < 5.2.6 Multiple Vulnerabilities. XSS, Private Post View, Password Rese

Reporter	Title	Published	Views	Family All 153
0day.today	WordPress Medic Theme v1.0.0 - Weak Password Recovery Mechanism for Forgotten Password Exploit	19 Jun 202300:00	–	zdt
BDU FSTEC	The vulnerability of the WordPress website content management system, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.	14 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the formatting.php and SanitizeFileName.php components of the WordPress content management system allow attackers to compromise data integrity.	14 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the wp_insert_user function and testWPUpdateUser_should_deleteUsersLugsCache (user.php) in the WordPress content management system allows attackers to access sensitive data and compromise its integrity.	14 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the parse_query method (class-wp-query.php) in the WordPress content management system allows a hacker to access confidential data.	14 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the stats() method (class-wp-object-cache.php) in the WordPress content management system allows a hacker to compromise data integrity.	14 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `render_block_core_search` and `render_block_core_rss` functions in the WordPress content management system allows attackers to compromise the integrity of data.	14 Aug 202000:00	–	bdu_fstec
CNVD	WordPress Cross-Site Scripting Vulnerability (CNVD-2020-27078)	7 May 202000:00	–	cnvd
CNVD	WordPress Access Restriction Bypass Vulnerability (CNVD-2020-27079)	7 May 202000:00	–	cnvd
CNVD	WordPress Access Control Error Vulnerability	7 May 202000:00	–	cnvd

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
wordpress	www.wordpress.org/news/2020/04/wordpress-5-4-1/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
wordpress	www.wordpress.org/support/wordpress-version/version-5-2-6/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

14 Mar 2023 00:00Current

6Medium risk

Vulners AI Score6

CVSS 25.5

CVSS 3.18.1 - 8.7

EPSS0.42551

wordpress vulnerabilities cross-site scripting user input validation remote attacker browser session private posts password reset tokens version number scanner