Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a (1) stylesheet name or (2) template name to wp-admin/customize.php.

Versions of WordPress prior to 4.3.1 are susceptible to a flaw that allows a cross-site scripting (XSS) attack. This flaw exists because the 'wp-includes/class-wp-theme.php' script does not validate input before returning it to users in error messages.  This may allow a remote attacker to create a specially crafted request that would execute arbitrary script code in a user's browser session within the trust relationship between their browser and the server. (CVE-2016-1564)

Aaron Jorbin reports :

WordPress 4.4.1 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately.

WordPress versions 4.4 and earlier are affected by a cross-site scripting vulnerability that could allow a site to be compromised.
This was reported by Crtc4L.

According to its self-reported version number, the WordPress application running on the remote web server is prior to 4.4.1.
It is, therefore, affected by a cross-site scripting (XSS) vulnerability due to improper validation of user-supplied input to the file wp-includes/class-wp-theme.php before returning it in error messages. A remote attacker can exploit this, via a crafted request, to execute arbitrary script code in the user's browser session.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Crtc4L discovered a cross-site scripting vulnerability in wordpress, a web blogging tool, allowing a remote authenticated administrator to compromise the site.

ID	Name	Product	Family	Severity
9065	WordPress < 4.4.1 XSS	Nessus Network Monitor	CGI	medium
88154	FreeBSD : wordpress -- XSS vulnerability (fb754341-c3e2-11e5-b5fe-002590263bf5)	Nessus	FreeBSD Local Security Checks	medium
87921	WordPress < 4.4.1 class-wp-theme.php XSS	Nessus	CGI abuses	medium
87900	Debian DSA-3444-1 : wordpress - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2016-1564

medium

Tenable Plugins

medium

medium

medium

medium