Lucene search

K
nessusThis script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_113111
HistoryJan 07, 2022 - 12:00 a.m.

WordPress 5.6.x < 5.6.7 Multiple Vulnerabilities

2022-01-0700:00:00
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
34

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities :

  • A stored Cross-Site Scripting (XSS) vulnerability through post slugs.

  • An object injection vulnerability in some multisite installations.

  • A SQL injection vulnerability in WP_Query.

  • A SQL injection vulnerability in WP_Meta_Query.

Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.

No source data
VendorProductVersionCPE
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*