Lucene search

K
nessusThis script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_114330
HistoryJun 26, 2024 - 12:00 a.m.

WordPress 4.1.x < 4.1.41 Multiple Vulnerabilities

2024-06-2600:00:00
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
1
wordpress
vulnerabilities
scanner

6.2 Medium

AI Score

Confidence

High

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities :

  • A Cross-Site Scripting (XSS) vulnerability affecting the HTML API.

  • A Cross-Site Scripting (XSS) vulnerability affecting the Template Part block.

  • A path traversal issue affecting sites hosted on Windows.

Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.

No source data
VendorProductVersionCPE
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

6.2 Medium

AI Score

Confidence

High