Test ID:	1.3.6.1.4.1.25623.1.0.108046
Category:	Web application abuses
Title:	WordPress < 4.7.1 Multiple Security Vulnerabilities - Linux
Summary:	WordPress is prone to multiple security vulnerabilities.
Description:	Summary: WordPress is prone to multiple security vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - Cross-site scripting (XSS) via the plugin name or version header on update-core.php - Cross-site request forgery (CSRF) bypass via uploading a Flash file - Cross-site scripting (XSS) via theme name fallback - Post via email checks mail.example.com if default settings are not changed - Cross-site request forgery (CSRF) in the accessibility mode of widget editing - Weak cryptographic security for multisite activation key Vulnerability Impact: Successfully exploiting this issue allow remote attacker to e.g. obtain sensitive information or inject arbitrary web script or HTML. Affected Software/OS: WordPress versions 4.7 and earlier on Linux. Solution: Update to WordPress version 4.7.1. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-5493 BugTraq ID: 95401 http://www.securityfocus.com/bid/95401 Debian Security Information: DSA-3779 (Google Search) http://www.debian.org/security/2017/dsa-3779 https://wpvulndb.com/vulnerabilities/8721 http://www.openwall.com/lists/oss-security/2017/01/14/6 http://www.securitytracker.com/id/1037591 Common Vulnerability Exposure (CVE) ID: CVE-2017-5492 BugTraq ID: 95407 http://www.securityfocus.com/bid/95407 https://wpvulndb.com/vulnerabilities/8720 Common Vulnerability Exposure (CVE) ID: CVE-2017-5491 BugTraq ID: 95406 http://www.securityfocus.com/bid/95406 https://wpvulndb.com/vulnerabilities/8719 Common Vulnerability Exposure (CVE) ID: CVE-2017-5490 BugTraq ID: 95402 http://www.securityfocus.com/bid/95402 https://wpvulndb.com/vulnerabilities/8718 https://www.mehmetince.net/low-severity-wordpress/ Common Vulnerability Exposure (CVE) ID: CVE-2017-5489 BugTraq ID: 95399 http://www.securityfocus.com/bid/95399 https://wpvulndb.com/vulnerabilities/8717 Common Vulnerability Exposure (CVE) ID: CVE-2017-5488 BugTraq ID: 95397 http://www.securityfocus.com/bid/95397 https://wpvulndb.com/vulnerabilities/8716 Common Vulnerability Exposure (CVE) ID: CVE-2017-5487 BugTraq ID: 95391 http://www.securityfocus.com/bid/95391 https://www.exploit-db.com/exploits/41497/ https://wpvulndb.com/vulnerabilities/8715 https://www.wordfence.com/blog/2016/12/wordfence-blocks-username-harvesting-via-new-rest-api-wp-4-7/ Common Vulnerability Exposure (CVE) ID: CVE-2016-10066 BugTraq ID: 95217 http://www.securityfocus.com/bid/95217 http://www.openwall.com/lists/oss-security/2016/12/26/9
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.