Fedora 45 : wordpress (2026-3c05ab9fa4)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-3c05ab9fa4 advisory. WordPress 7.1.3 Maintenance and Security Release Security updates included in this release - A stored XSS on the Comments administration page, exploitable vi...

Fedora 43 : wordpress (2026-e0ebe50146)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e0ebe50146 advisory. WordPress 6.9.10 Security Release Security updates included in this release - A stored XSS on the Comments administration page, exploitable via pending...

Fedora 44 : wordpress (2026-5ada1f2961)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5ada1f2961 advisory. WordPress 6.9.10 Security Release Security updates included in this release - A stored XSS on the Comments administration page, exploitable via pending...

WordPress Core <= 7.1.2 - Contributor+ DoS via infinite loop in WP_Http::make_absolute_url() vulnerability

Contributor+ DoS via infinite loop in WPHttp::makeabsoluteurl vulnerability discovered by Anthropic in WordPress core versions = 7.1.2...

Like Button Rating < 2.6.32 - Unauthenticated Full-Read SSRF

The LikeBtn WordPress plugin was vulnerable to Unauthenticated Full-Read Server-Side Request Forgery SSRF. On line 7493 in likebtnlikebutton.php a hook is set to allow unauthenticated ajax calls which will call the function likebtnprx. As the name suggests, this function works as a proxy and can ...

WordPress 3.9.x < 3.9.19 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A DOM-based cross-site scripting XSS vulnerability exists in the uploadSizeError function within file wp-includes/js/plupload/handlers.js when handling overly large file...

WordPress 4.4.x < 4.4.10 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A DOM-based cross-site scripting XSS vulnerability exists in the uploadSizeError function within file wp-includes/js/plupload/handlers.js when handling overly large file...

WordPress < 4.7.5 Multiple Vulnerabilities

According to its self-reported version number, the WordPress application running on the remote web server is prior to 4.7.5. It is, therefore, affected by multiple vulnerabilities : - A DOM-based cross-site scripting XSS vulnerability exists in the uploadSizeError function within file...