Lucene search
This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_113911HistoryMay 17, 2023 - 12:00 a.m.
WordPress 4.2.x < 4.2.35 Multiple Vulnerabilities
2023-05-1700:00:00
This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
39
wordpress
vulnerabilities
directory traversal
csrf
cross-site scripting
sanitization
shortcode
EPSS
0.004
Percentile
73.1%
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities :
-
A directory traversal via wp_lang. (CVE-2023-2745)
-
A Cross-Site Request Forgery (CSRF) via wp_ajax_set_attachment_thumbnail.
-
An authenticated stored Cross-Site Scripting (XSS) via embed discovery functionality.
-
An insufficient sanitization of block attributes.
-
A shortcode execution in user generated content.
Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.
No source dataRelated
wordfence
wordfence
nessus
nessus
WordPress 5.9.x < 5.9.6 Multiple Vulnerabilities
2023-05-17 00:00:00
WordPress 4.6.x < 4.6.26 Multiple Vulnerabilities
2023-05-17 00:00:00
WordPress 4.3.x < 4.3.31 Multiple Vulnerabilities
2023-05-17 00:00:00
osv
osv
CVE-2023-2745
2023-05-17 09:15:10
BIT-wordpress-multisite-2023-2745
2024-03-06 11:08:57
wordpress - security update
2023-06-21 00:00:00
nvd
nvd
CVE-2023-2745
2023-05-17 09:15:10
debian
debian
[SECURITY] [DLA 3462-1] wordpress security update
2023-06-20 22:25:05
[SECURITY] [DSA 5685-1] wordpress security update
2024-05-08 22:06:13
packetstorm
packetstorm
WordPress Core 6.2 XSS / CSRF / Directory Traversal
2023-05-17 00:00:00
wpvulndb
wpvulndb
WP < 6.2.1 - Directory Traversal via Translation Files
2023-05-16 00:00:00
prion
prion
Cross site scripting
2023-05-17 09:15:00
openvas
openvas
WordPress Multiple Vulnerabilities (May 2023) - Linux
2023-05-17 00:00:00
WordPress Multiple Vulnerabilities (May 2023) - Windows
2023-05-17 00:00:00
Debian: Security Advisory (DLA-3462-1)
2023-06-21 00:00:00
zdt
zdt
WordPress Core 6.2 XSS / CSRF / Directory Traversal Vulnerability
2023-05-19 00:00:00
cvelist
cvelist
CVE-2023-2745
2023-05-17 08:36:44
debiancve
debiancve
CVE-2023-2745
2023-05-17 09:15:10
veracode
veracode
Directory Traversal
2023-05-18 08:40:21
cve
cve
CVE-2023-2745
2023-05-17 09:15:10
ubuntucve
ubuntucve
CVE-2023-2745
2023-05-17 00:00:00
githubexploit
githubexploit
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Wordpress
2024-08-08 03:02:05
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Wordpress
2023-06-12 13:06:54