WordPress 4.6.x < 4.6.13 Multiple Vulnerabilities

WordPress 4.6.x < 4.6.13 Multiple Vulnerabilities According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities: Authors could alter meta data to delete files that they weren’t authorized to. Authors could create posts of unauthorized types with specially crafted input. Contributors could craft meta data in a way that resulted in PHP object injection. Contributors could edit new comments from higher-privileged users, potentially leading to a cross-site scripting. User activation screen could be indexed by search engines leading to exposure of sensitive information. Authors on Apache-hosted sites could upload specifically crafted files that bypass MIME verification, leading to a cross-site scripting