Detections
Analytics
WordPress < 3.3.3 / 3.4.0 Multiple Vulnerabilities
medium Nessus Plugin ID 72984
Language:
Synopsis
The remote web server contains a PHP application that is affected by multiple vulnerabilities.Description
According to its version number, the WordPress install hosted on the remote web server is affected by the following vulnerabilities :- A cross-site scripting flaw exists in the 'edit-tags.php' script where it does not validate the 'slug' parameter upon submission. This could allow a remote attacker to create a specially crafted request that would execute arbitrary script code in a user's browser session within the trust relationship between the browser and server. (CVE-2012-6633)
- A flaw exists in the 'wp-admin/media-upload.php' script where input for the 'post_id' parameter is not properly sanitized. This could allow a remote attacker to access potentially sensitive information or bypass media-attachment restrictions. (CVE-2012-6634)
- A flaw exists in the 'wp-admin/includes/class-wp-posts-list-table.php' script where it fails to restrict access to the excerpt-view. This could allow a remote attacker to access potentially sensitive information when viewing a draft. (CVE-2012-6635)
- Some hardening was applied to prevent unfiltered HTML in comments. This could potentially allow clickjacking.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to WordPress 3.3.3 / 3.4.0 or later.See Also
https://codex.wordpress.org/Version_3.3.3
https://core.trac.wordpress.org/changeset/21083
Plugin Details
Severity: Medium
ID: 72984
File Name: wordpress_3_3_3.nasl
Version: 1.9
Type: remote
Family: CGI abuses
Published: 3/13/2014
Updated: 6/5/2024
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Enable CGI Scanning: true
Risk Information
VPR
Risk Factor: Low
Score: 3.4
CVSS v2
Risk Factor: Medium
Base Score: 6.4
Temporal Score: 4.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N
Vulnerability Information
CPE: cpe:/a:wordpress:wordpress
Required KB Items: installed_sw/WordPress, www/PHP, Settings/ParanoidReport
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Patch Publication Date: 6/27/2012
Vulnerability Publication Date: 6/5/2012