WordPress 4.3.x < 4.3.30 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A stored Cross-Site Scripting XSS via wp-mail.php post by email. - An open redirect in wpnonceays. - Sender's email address is exposed in wp-mail.php. - A Cross-Site...

WP < 6.0.3 - SQLi in WP_Date_Query

Description WP does not properly sanitize the relation passed to WPDateQuery, which could lead to SQL injection...

WordPress core <= 6.0.2 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability due to improper sanitization in WPDateQuery discovered by Michael Mazzolini in WordPress core versions = 6.0.2. Solution Update the WordPress WordPress wordpress to the latest available version at least 6.0.3...