Test ID:	1.3.6.1.4.1.25623.1.1.10.2015.0309
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2015-0309)
Summary:	The remote host is missing an update for the 'wordpress' package(s) announced via the MGASA-2015-0309 advisory.
Description:	Summary: The remote host is missing an update for the 'wordpress' package(s) announced via the MGASA-2015-0309 advisory. Vulnerability Insight: The wordpress package has been updated to version 3.9.8, fixing three cross-site scripting issues (CVE-2015-5732, CVE-2015-5733, CVE-2015-5734), a potential timing side-channel attack in Customizer (CVe-2015-5730), an issue in Heartbeat where an attacker could lock a post from being edited (CVE-2015-5731), and an SQL injection issue (CVE-2015-2213), as well as other bugs. See the upstream announcement and release notes for more details. Affected Software/OS: 'wordpress' package(s) on Mageia 4. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2213 BugTraq ID: 76160 http://www.securityfocus.com/bid/76160 Debian Security Information: DSA-3332 (Google Search) http://www.debian.org/security/2015/dsa-3332 Debian Security Information: DSA-3383 (Google Search) http://www.debian.org/security/2015/dsa-3383 https://wpvulndb.com/vulnerabilities/8126 http://openwall.com/lists/oss-security/2015/08/04/7 http://www.securitytracker.com/id/1033178 Common Vulnerability Exposure (CVE) ID: CVE-2015-5730 https://wpvulndb.com/vulnerabilities/8130 Common Vulnerability Exposure (CVE) ID: CVE-2015-5731 Common Vulnerability Exposure (CVE) ID: CVE-2015-5732 https://wpvulndb.com/vulnerabilities/8131 Common Vulnerability Exposure (CVE) ID: CVE-2015-5733 BugTraq ID: 76331 http://www.securityfocus.com/bid/76331 https://wpvulndb.com/vulnerabilities/8132 Common Vulnerability Exposure (CVE) ID: CVE-2015-5734 https://blog.sucuri.net/2015/08/persistent-xss-vulnerability-in-wordpress-explained.html https://wpvulndb.com/vulnerabilities/8133
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.