Test ID:	1.3.6.1.4.1.25623.1.0.808035
Category:	Web application abuses
Title:	WordPress < 4.5 Multiple Vulnerabilities (May 2016) - Linux
Summary:	WordPress is prone to multiple vulnerabilities.
Description:	Summary: WordPress is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws are due to: - An improper validation of HTTP request for detection of valid IP addresses. - An insufficient validation in network setting. - A script compression option CSRF. Vulnerability Impact: Successfully exploiting this issue allows remote attacker to conduct XSS, CSRF and SSRF bypass attacks. Affected Software/OS: WordPress versions prior to 4.5 on Linux. Solution: Update to WordPress version 4.5 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-4029 Debian Security Information: DSA-3681 (Google Search) http://www.debian.org/security/2016/dsa-3681 https://core.trac.wordpress.org/query?status=closed&milestone=4.5 https://wpvulndb.com/vulnerabilities/8473 http://www.securitytracker.com/id/1036594 Common Vulnerability Exposure (CVE) ID: CVE-2016-6634 BugTraq ID: 92390 http://www.securityfocus.com/bid/92390 https://wpvulndb.com/vulnerabilities/8474 Common Vulnerability Exposure (CVE) ID: CVE-2016-6635 https://wpvulndb.com/vulnerabilities/8475
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.