Published: 22/05/2016 Updated: 04/11/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 385

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in WordPress prior to 4.4.1 allow remote malicious users to inject arbitrary web script or HTML via a (1) stylesheet name or (2) template name to wp-admin/customize.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wordpress wordpress

Debian Bug report logs - #813697 wordpress: New version available: 442 (CVE-2016-2221 CVE-2016-2222) Package: wordpress; Maintainer for wordpress is Craig Small <csmall@debianorg>; Source for wordpress is src:wordpress (PTS, buildd, popcon) Reported by: Christer Mjellem Strand <dilldall@bjorkorg> Date: Thu, 4 Fe ...

Debian Bug report logs - #810325 wordpress: CVE-2016-1564: Cross site scripting vulnerability Package: src:wordpress; Maintainer for src:wordpress is Craig Small <csmall@debianorg>; Reported by: Craig Small <csmall@debianorg> Date: Fri, 8 Jan 2016 10:48:12 UTC Severity: important Tags: fixed-upstream, security, up ...

Crtc4L discovered a cross-site scripting vulnerability in wordpress, a web blogging tool, allowing a remote authenticated administrator to compromise the site For the oldstable distribution (wheezy), this problem has been fixed in version 361+dfsg-1~deb7u9 For the stable distribution (jessie), this problem has been fixed in version 41+dfsg-1+d ...

Project 7 - WordPress Pentesting Time spent: 5 hours spent in total Objective: Find, analyze, recreate, and document five vulnerabilities affecting an old version of WordPress Pentesting Report Authenticated Shortcode Tags Cross-Site Scripting (XSS) Summary: Vulnerability types: Cross-Site Scripting (CVE 2015-5714) Tested in version: 42 Fixed in version: 431 GIF Wa

CodePath University's Web Security - Week 7: WordPress Pentesting (Spring 2018)

CodePath University's Web Security Project 7 - WordPress Pentesting Time spent: 5 hours spent in total Objective: Find, analyze, recreate, and document five vulnerabilities affecting an old version of WordPress Pentesting Report (Required) 422 - Authenticated Stored Cross-Site Scripting (XSS) Summary: A stored XSS vulnerability in WordPress allows an user with the

wordpress pentesting vulnerabilities affecting old version

WordPress Pentesting Time spent: 5 hours spent in total Objective: Find, analyze, recreate, and document five vulnerabilities affecting an old version of WordPress Pentesting Report 422 - Authenticated Stored Cross-Site Scripting (XSS) Vulnerability types: 42~ Tested in version: 42 Fixed in version: 423 GIF Walkthrough:

Project 7 - WordPress Pentesting Time spent: 12 hours spent in total Pentesting Report User Enumeration Summary: WPscan enumerates users Vulnerability types: User Enumeration Tested in version: 422 Fixed in version: GIF Walkthrough:

wordpress pentesting vulnerabilities affecting old version

WordPress Pentesting Time spent: 5 hours spent in total Objective: Find, analyze, recreate, and document five vulnerabilities affecting an old version of WordPress Pentesting Report 422 - Authenticated Stored Cross-Site Scripting (XSS) Vulnerability types: 42~ Tested in version: 42 Fixed in version: 423 GIF Walkthrough:

Week 7 Assignment - WordPress vs. Kali

Project 7 - WordPress Pentesting Time spent: 5 hours spent in total Objective: Find, analyze, recreate, and document 3 affecting an old version of WordPress Version of WordPress Tested: 42 Vulnerability 1 - Legacy Theme Preview Cross-Site Scripting (XSS) Steps to reproduce: Go to any post Paste the following as a comment: <a href='/wp-admin/' title="

CS4984 CS4984 - Wordpress vs Kali - Week 7 Assignment Time spent: 10 hours total READMEmd Authenticated Stored Cross-Site Scripting (XSS) Summary: Vulnerability type: XSS Tested in version: 42 Fixed in version: 423 GIF Walkthrough:

Kali vs WP

Pentesting Kali vs WP v10 Project 7 - WordPress Pentesting Time spent: 5 hours spent in total Objective: Find, analyze, recreate, and document five vulnerabilities affecting an old version of WordPress Pentesting Report CVE-2016-6634 Summary: Input Validation Error Vulnerability types: Unspecified Reflected Cross Site Scripting Vulnerability Tested in version: 42 Fixed

CWE-79 http://twitter.com/brutelogic/statuses/685105483397619713 https://core.trac.wordpress.org/changeset/36185 http://www.openwall.com/lists/oss-security/2016/01/08/4 https://codex.wordpress.org/Version_4.4.1 https://wordpress.org/news/2016/01/wordpress-4-4-1-security-and-maintenance-release/https://wpvulndb.com/vulnerabilities/8358 http://www.securitytracker.com/id/1034622 http://www.debian.org/security/2016/dsa-3444 https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=813697 https://github.com/breindy/Week7-WordPress-Pentesting https://www.debian.org/security/./dsa-3444

CVE-2016-1564

Vulnerability Summary

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect