Lucene search

K
nessusThis script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_114342
HistoryJun 26, 2024 - 12:00 a.m.

WordPress 5.3.x < 5.3.18 Multiple Vulnerabilities

2024-06-2600:00:00
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
6
wordpress security
version 5.3.18
vulnerabilities detection

6.2 Medium

AI Score

Confidence

High

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities :

  • A Cross-Site Scripting (XSS) vulnerability affecting the HTML API.

  • A Cross-Site Scripting (XSS) vulnerability affecting the Template Part block.

  • A path traversal issue affecting sites hosted on Windows.

Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.

No source data
VendorProductVersionCPE
wordpresswordpress*cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

6.2 Medium

AI Score

Confidence

High