Published: 14/12/2018 Updated: 04/03/2019

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

In WordPress prior to 4.9.9 and 5.x prior to 5.0.1, contributors could modify new comments made by users with greater privileges, possibly causing XSS.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wordpress wordpress
debian debian linux 8.0
debian debian linux 9.0

Debian Bug report logs - #916403 wordpress: Several security issues versions 38-50 Package: src:wordpress; Maintainer for src:wordpress is Craig Small <csmall@debianorg>; Reported by: Craig Small <csmall@debianorg> Date: Thu, 13 Dec 2018 23:51:02 UTC Severity: normal Tags: security, upstream Found in version wor ...

Several vulnerabilities were discovered in Wordpress, a web blogging tool They allowed remote attackers to perform various Cross-Side Scripting (XSS) and PHP injections attacks, delete files, leak potentially sensitive data, create posts of unauthorized types, or cause denial-of-service by application crash For the stable distribution (stretch), ...

Testing certain penetration methods on WordPress

Pen Testing Report On Wordpress Testing certain penetration methods on WordPress 41 Intial Scan The first step in my initial scan was to have the docker images of both wordpress and kali running With kali invoked we will first update the WordPress scans database using wpscan --update Now, I ran wpscan against the running WordPress instance on my local host Using the foll

CWE-79 https://wordpress.org/news/2018/12/wordpress-5-0-1-security-release/https://www.zdnet.com/article/wordpress-plugs-bug-that-led-to-google-indexing-some-user-passwords/https://wordpress.org/support/wordpress-version/version-5-0-1/https://codex.wordpress.org/Version_4.9.9 https://wpvulndb.com/vulnerabilities/9172 http://www.securityfocus.com/bid/106220 https://lists.debian.org/debian-lts-announce/2019/02/msg00019.html https://www.debian.org/security/2019/dsa-4401 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916403 https://nvd.nist.gov https://github.com/Vale12344/pen-test-wordpress https://www.debian.org/security/2019/dsa-4401

CVE-2018-20153

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect