WordPress 4.2.x < 4.2.29 Multiple Vulnerabilities

WordPress 4.2.x < 4.2.29 Multiple Vulnerabilities Detected self-reported version number, including deserialization, XSS, DoS, privilege escalation, arbitrary file deletion, and CSRF vulnerabilities

Reporter	Title	Published	Views	Family All 196
ArchLinux	[ASA-202011-3] wordpress: multiple issues	3 Nov 202000:00	–	archlinux
BDU FSTEC	The vulnerability of the WordPress website content management system, related to deficiencies in access control for certain functions, allows attackers to compromise data integrity.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the wp-includes/Requests/Utility/FilteredIterator.php component of the WordPress content management system, related to the restoration of unreliable data structures in memory, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WordPress website content management system, related to deficiencies in mechanisms for combating cross-site fraud, allows attackers to compromise the integrity of data.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the is_protected_meta function in the wp-includes/meta.php component of the WordPress content management system, related to improper access control, allows attackers to compromise data integrity and cause service failures.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WordPress website content management system, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the is_blog_installed function (wp-includes/functions.php) in the WordPress content management system involves a lack of input validation mechanisms. This allows attackers to access sensitive data, compromise its integrity, and cause service interruptions.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the wp-includes/class-wp-xmlrpc-server.php component of the WordPress content management system, related to a lack of privilege management mechanisms, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WordPress website content management system lies in the lack of a mechanism for managing privileges. This allows attackers to access confidential data, compromise its integrity, and cause service failures.	30 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WordPress website content management system, related to deficiencies in the security measures used to protect web page structures, allows attackers to compromise data integrity.	30 Mar 202100:00	–	bdu_fstec

Source	Link
wordpress	www.wordpress.org/support/wordpress-version/version-4-2-29/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
wordpress	www.wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

14 Mar 2023 00:00Current

9.5High risk

Vulners AI Score9.5

CVSS 27.5

CVSS 3.19.8

EPSS0.27967